CVE-2026-18059

The PixelYourSite – Your smart PIXEL TAG & API Manager plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 11.2.1 via the getWooPurchaseEventParams. This makes it possible for unauthenticated attackers to extract WooCommerce purchase metadata...

CVE-2026-18059

PixelYourSite (WordPress plugin) ≤ 11.2.1 is affected by an unauthenticated Sensitive Information Exposure via the getWooPurchaseEventParams function. The issue allows any unauthenticated attacker to retrieve WooCommerce purchase metadata for any existing order by supplying an invalid or arbitrar...