Vendor

    PixelYourSite

    23 known vulnerabilities in products by PixelYourSite, 0 of them actively exploited (CISA KEV).

    Key figures

    23

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    1

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in PixelYourSite
    CriticalCVE-2026-7637

    Boost <= 2.0.3 - Unauthenticated PHP Object Injection via STYXKEY-BOOST_USER_LOCATION Cookie

    		9.8
    HighCVE-2026-7049

    PixelYourSite Pro: Server-Side Request Forgery (SSRF)

    		7.2
    HighCVE-2026-118078

    WordPress Product Catalog Feed by PixelYourSite plugin <= 3.1.4 - PHP Object Injection vulnerability

    		7.2
    HighCVE-2026-9331

    PixelYourSite EDD Product Catalog Feed by PixelYourSite: Missing Authorization

    		7.1
    MediumCVE-2026-18059

    PixelYourSite: Exposure of Sensitive Information to an Unauthorized Actor

    		5.3
    HighCVE-2026-9010

    Boost <= 2.0.3 - Unauthenticated Blind SQL Injection via Multiple Parameters

    		7.5
    MediumCVE-2026-95530

    PixelYourSite: Cross-site Scripting

    		6.5
    HighCVE-2026-1841

    PixelYourSite <= 11.2.0 - Unauthenticated Stored Cross-Site Scripting

    		7.2
    HighCVE-2026-7613

    PixelYourSite Cost of Goods by PixelYourSite: Cross-site Scripting

    		7.2
    HighCVE-2026-1844

    PixelYourSite PRO <= 12.4.0.2 - Unauthenticated Stored Cross-Site Scripting

    		7.2
    HighCVE-2024-7870

    PixelYourSite: Improper Authentication

    		6.5
    MediumCVE-2025-14280

    PixelYourSite <= 11.1.5 - Sensitive Information Exposure via Log File

    		5.3
    MediumCVE-2018-0578

    Minimal Work SRL PixelYourSite: Cross-Site Scripting (XSS)

    		5.4
    HighCVE-2026-27072

    PixelYourSite: Cross-site Scripting

    		7.1
    MediumCVE-2023-1804

    Product Catalog Feed by PixelYourSite < 2.1.1 - Reflected XSS

    		6.1
    MediumCVE-2025-0769

    PixelYourSite 10.1.1.1 - Insecure deserialization

    		—
    MediumCVE-2023-1805

    Product Catalog Feed by PixelYourSite < 2.1.1 - Reflected XSS

    		6.1
    MediumCVE-2023-2584

    PixelYourSite: Cross-site Scripting

    		4.4
    MediumCVE-2024-37447

    WordPress PixelYourSite plugin <= 9.6.1.1 - Cross Site Scripting (XSS) vulnerability

    		5.9
    MediumCVE-2025-22300

    WordPress PixelYourSite plugin <= 10.0.1.2 - Cross Site Request Forgery (CSRF) vulnerability

    		5.4
    MediumCVE-2025-10588

    PixelYourSite <= 11.1.2 – Cross-Site Request Forgery to GDPR Options Modification

    		4.3
    HighCVE-2023-49824

    PixelYourSite Product Catalog Feed by PixelYourSite: Cross-Site Request Forgery (CSRF)

    		5.4
    MediumCVE-2023-22700

    PixelYourSite: Cross-Site Request Forgery (CSRF)

    		4.3

    Products

    Products by PixelYourSite
    PixelYourSite60
    Pixelyoursite – Your Smart Pixel (tag) & API Manager60
    Pixelyoursite Pro – Your Smart Pixel (tag) Manager50
    Pixelyoursite – Your Smart Pixel (tag) Manager50
    Product Catalog Feed by PixelYourSite30