<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: pixelyoursite</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2024-7870: The PixelYourSite – Your smart PIXEL (TAG) &amp; API Manager and the PixelYourSite PRO plugins for WordPress are v</title><link>https://patchthecve.com/cve/CVE-2024-7870.html</link><guid>https://patchthecve.com/cve/CVE-2024-7870.html</guid><pubDate>Wed, 17 Jun 2026 08:21:05 +0000</pubDate><description>MEDIUM 6.5: The PixelYourSite – Your smart PIXEL (TAG) &amp; API Manager and the PixelYourSite PRO plugins for WordPress are vulnerable to Sensitive Information Exposure in all versions up to, and including, 9.7.1 and 10.4.2, respectively, through publicly exposed log files. This makes it possible for unauthenticat</description></item><item><title>CVE-2024-37447: Improper Neutralization of Input During Web Page Generation (XSS or &#x27;Cross-site Scripting&#x27;) vulnerability in P</title><link>https://patchthecve.com/cve/CVE-2024-37447.html</link><guid>https://patchthecve.com/cve/CVE-2024-37447.html</guid><pubDate>Wed, 17 Jun 2026 07:38:23 +0000</pubDate><description>MEDIUM 5.9: Improper Neutralization of Input During Web Page Generation (XSS or &#x27;Cross-site Scripting&#x27;) vulnerability in PixelYourSite PixelYourSite – Your smart PIXEL (TAG) Manager allows Stored XSS.This issue affects PixelYourSite – Your smart PIXEL (TAG) Manager: from n/a through 9.6.1.1.</description></item><item><title>CVE-2023-2584: The PixelYourSite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in vers</title><link>https://patchthecve.com/cve/CVE-2023-2584.html</link><guid>https://patchthecve.com/cve/CVE-2023-2584.html</guid><pubDate>Wed, 17 Jun 2026 05:52:54 +0000</pubDate><description>MEDIUM 4.4: The PixelYourSite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in versions up to, and including, 9.3.6 (9.6.1 in the Pro version) due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator</description></item><item><title>CVE-2023-22700: Cross-Site Request Forgery (CSRF) vulnerability in PixelYourSite PixelYourSite – Your smart PIXEL (TAG) Manage</title><link>https://patchthecve.com/cve/CVE-2023-22700.html</link><guid>https://patchthecve.com/cve/CVE-2023-22700.html</guid><pubDate>Wed, 17 Jun 2026 05:35:59 +0000</pubDate><description>MEDIUM 4.3: Cross-Site Request Forgery (CSRF) vulnerability in PixelYourSite PixelYourSite – Your smart PIXEL (TAG) Manager plugin &lt;= 9.3.0 versions.</description></item></channel></rss>