WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
pixelbeds-channel-manager-booking-engine
Published
2025-06-19
Title
PixelBeds Channel Manager and Hotel Booking Engine <= 1.0 - Cross-Site Request Forgery
Slug
pixelines-email-protector
Published
2025-09-09
Title
Pixeline's Email Protector < 1.4.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Slug
pixelstats
Published
2025-03-14
Title
pixelstats <= 0.8.2 - Reflected Cross-Site Scripting
Slug
pixelyoursite
Published
2018-04-27
Title
PixelYourSite < 5.3.0 - XSS
Slug
pixelyoursite
Published
2023-05-16
Title
PixelYourSite < 9.3.7 and PixelYourSite Pro < 9.6.2 - Admin+ Stored Cross-Site Scripting
Slug
pixelyoursite
Published
2024-06-28
Title
PixelYourSite – Your smart PIXEL (TAG) Manager < 9.6.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
pixelyoursite
Published
2024-09-03
Title
PixelYourSite – Your smart PIXEL (TAG) & API Manager <= 9.7.1 and PixelYourSite PRO <= 10.4.2 - Unauthenticated Information Exposure and Log Deletion
Slug
pixelyoursite
Published
2025-01-06
Title
PixelYourSite < 10.0.2 - Settings Update via CSRF
Slug
pixelyoursite
Published
2025-02-28
Title
PixelYourSite < 10.1.1.2 - Unauthenticated PHP Object Injection
Slug
pixelyoursite
Published
2025-10-03
Title
PixelYourSite < 11.1.2 - Admin+ LFI
Slug
pixelyoursite
Published
2025-10-21
Title
PixelYourSite < 11.1.3 – GDPR Options Update via CSRF
Slug
pixelyoursite
Published
2025-12-29
Title
PixelYourSite < 11.1.5.1 - Sensitive Information Exposure via Log File
Slug
pixelyoursite
Published
2026-02-13
Title
PixelYourSite < 11.2.0.1 - Unauthenticated Stored XSS
Slug
pixelyoursite
Published
2026-02-17
Title
PixelYourSite < 11.2.0.2 - Unauthenticated Stored XSS
Slug
pixelyoursite-pro
Published
2023-05-16
Title
PixelYourSite < 9.3.7 and PixelYourSite Pro < 9.6.2 - Admin+ Stored Cross-Site Scripting
Slug
pixelyoursite-pro
Published
2024-09-03
Title
PixelYourSite – Your smart PIXEL (TAG) & API Manager <= 9.7.1 and PixelYourSite PRO <= 10.4.2 - Unauthenticated Information Exposure and Log Deletion
Slug
pixelyoursite-pro
Published
2026-02-13
Title
PixelYourSite PRO < 12.4.0.3 - Unauthenticated Stored Cross-Site Scripting
Slug
pixelyoursite-pro
Published
2026-05-01
Title
PixelYourSite Pro < 12.5.0.2 - Unauthenticated Blind Server-Side Request Forgery via 'urls[]' Parameter
Slug
pixfields
Published
2023-03-30
Title
PixFields <= 0.7.0 - Contributor+ Stored Cross-Site Scripting
Slug
pixfields
Published
2023-10-16
Title
PixFields < 0.7.1 - Arbitrary Settings Update via CSRF
Slug
pixfort-core
Published
2026-03-02
Title
pixfort Core < 3.2.26 - Missing Authorization
Slug
pixfort-core
Published
2026-03-02
Title
pixfort Core < 3.2.26 - Reflected Cross-Site Scripting
Slug
pixmagix
Published
2026-06-29
Title
PixMagix < 1.7.3 - Authenticated (Author+) Path Traversal in 'layers[].id' Parameter
Slug
pixnet
Published
2025-01-06
Title
PIXNET Plugin <= 2.9.10 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
pixobe-cartography
Published
2024-11-28
Title
Pixobe Cartography <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting