CVE-2026-105199

The Pixel Tag Manager for WooCommerce WordPress plugin, versions before 2.2.3 , is vulnerable to a Stored Cross-Site Scripting (XSS) flaw. The root cause is a missing capability check in an AJAX action, which exposes the protecting nonce to any user with access to the admin dashboard. This allows...