PT-2024-39084 · WordPress · The Pixel Cat – Conversion Pixel Manager

Name of the Vulnerable Software and Affected Versions: The Pixel Cat – Conversion Pixel Manager plugin for WordPress versions up to, and including, 3.0.5 Description: The issue arises from the use of add query arg without proper escaping on the URL, allowing unauthenticated attackers to inject...

PT-2024-27561 · Unknown · Pixelyoursite

Name of the Vulnerable Software and Affected Versions: PixelYourSite – Your smart PIXEL TAG Manager versions through 9.6.1.1 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS, which...

WordPress Pixel Manager for WooCommerce plugin <= 1.43.3 - Malicious Polyfill.io Embed vulnerability

Malicious Polyfill.io Embed vulnerability discovered by Sansec.io in WordPress Plugin Pixel Manager for WooCommerce versions = 1.43.3...

WordPress Pixel Manager for WooCommerce Plugin <= 1.43.3 is vulnerable to Backdoor

Software Pixel Manager for WooCommerce Type Plugin Vulnerable versions = 1.43.3 Fixed in 1.43.4 OWASP Top 10 A3: Injection Classification Backdoor CVE N/A Patch priority Low CVSS severity Low 5.3 Developer SweetCode PSID 3a6235394517 Credits Sansec.io Required privilege Unauthenticated Published ...

WordPress Pixel Manager for WooCommerce Plugin < 1.32.4 is vulnerable to Cross Site Scripting (XSS)

Software Pixel Manager for WooCommerce Type Plugin Vulnerable versions 1.32.4 Fixed in 1.32.4 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer SweetCode PSID ad00a7298176 Credits Rafie Muhammad Patchstac...

WordPress WooCommerce Pixel Manager plugin < 1.14.3 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress WooCommerce Pixel Manager plugin versions 1.14.3. Solution Update the WordPress WooCommerce Pixel Manager plugin to the latest available version at least 1.14.3...

WordPress WooCommerce Pixel Manager plugin < 1.14.3 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress WooCommerce Pixel Manager plugin versions 1.14.3. Solution Update the WordPress WooCommerce Pixel Manager plugin to the latest available version at least 1.14.3...