UpHeron
All vulnerabilities

WordPress plugins

CVE-2025-14280

PixelYourSite – Your smart PIXEL (TAG) & API Manager: Exposure of Sensitive Information to an Unauthorized Actor

Severity
Medium 5.3
Published
29 Dec 2025
Added to UpHeron
5 Nov 2026
Fixed in
11.1.5.1
Also known as
EUVD-2025-205634, WPV-df1c31635e3d
Sources
WPVulnerability

Affected software

SoftwareAffected versions
Pixelyoursite (WordPress plugin)WordPress plugins · wp-plugin:pixelyoursite
  • Every version before 11.1.5.1

References

  • CVE.org https://www.cve.org/CVERecord?id=CVE-2025-14280
  • Wordfence https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/pixelyoursite/pixelyoursite-1115-sensitive-information-exposure-via-log-file