UpHeron
All vulnerabilities

WordPress plugins

CVE-2025-10588

PixelYourSite – Your smart PIXEL (TAG) & API Manager: Cross-Site Request Forgery (CSRF)

Severity
Medium 4.3
Published
21 Oct 2025
Added to UpHeron
5 Nov 2026
Fixed in
11.1.3
Also known as
WPV-12259db0a25a
Sources
WPVulnerability

Affected software

SoftwareAffected versions
Pixelyoursite (WordPress plugin)WordPress plugins · wp-plugin:pixelyoursite
  • Every version before 11.1.3

References

  • CVE.org https://www.cve.org/CVERecord?id=CVE-2025-10588
  • Wordfence https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/pixelyoursite/pixelyoursite-1112-cross-site-request-forgery-to-gdpr-options-modification