Medium
CVE-2026-95530
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 20
Reset filters
High
CVE-2026-9331
EDD Product Catalog Feed by PixelYourSite <= 1.0.2 - Authenticated (Subscriber+) Arbitrary Options Deletion via Missing Authorization on 'delete' Parameter
Medium
CVE-2026-18059
PixelYourSite <= 11.2.1 - Unauthenticated Sensitive Information Exposure via Order-Received Endpoint Missing Key Validation
High
CVE-2026-7613
Cost of Goods by PixelYourSite <= 1.2.12 - Unauthenticated Stored Cross-Site Scripting via Cost of Goods Import
High
CVE-2026-7049
PixelYourSite Pro <= 12.5.0.1 - Unauthenticated Blind Server-Side Request Forgery via 'urls[]' Parameter
High
CVE-2026-1844
PixelYourSite PRO <= 12.4.0.2 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2026-1841
PixelYourSite <= 11.2.0 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2025-14280
PixelYourSite <= 11.1.5 - Sensitive Information Exposure via Log File
Medium
CVE-2025-10723
PixelYourSite – Your smart PIXEL (TAG) Manager < 11.1.2 - Authenticated (Administrator+) Local File Inclusion
Medium
CVE-2025-10588
PixelYourSite <= 11.1.2 – Cross-Site Request Forgery to GDPR Options Modification
High
CVE-2025-0769
PixelYourSite – Your smart PIXEL (TAG) & API Manager <= 10.1.1.1 - Unauthenticated PHP Object Injection
Medium
CVE-2025-22300
PixelYourSite – Your smart PIXEL (TAG) Manager <= 10.0.1.2 - Cross-Site Request Forgery
Medium
CVE-2024-7870
PixelYourSite – Your smart PIXEL (TAG) & API Manager <= 9.7.1 and PixelYourSite PRO <= 10.4.2 - Unauthenticated Information Exposure and Log Deletion
Medium
CVE-2024-37447
PixelYourSite – Your smart PIXEL (TAG) Manager <= 9.6.1.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-49824
Product Catalog Feed by PixelYourSite <= 2.1.1 - Cross-Site Request Forgery
Medium
CVE-2023-2584
PixelYourSite <= 9.3.6 and PixelYourSite Pro <= 9.6.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-1804
Product Catalog Feed by PixelYourSite <= 2.1.0 - Reflected Cross-Site Scripting via 'edit'
Medium
CVE-2023-1805
Product Catalog Feed by PixelYourSite <= 2.1.0 - Reflected Cross-Site Scripting via 'page'
Medium
CVE-2023-22700
PixelYourSite <= 9.3.0 - Cross-Site Request Forgery
Medium
CVE-2018-0578
PixelYourSite <= 5.2.1 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.