UpHeron
All vulnerabilities

WordPress plugins

CVE-2025-22300

PixelYourSite – Your smart PIXEL (TAG) & API Manager: Cross-Site Request Forgery (CSRF)

Severity
Medium 5.4
Published
6 Jan 2025
Added to UpHeron
5 Nov 2026
Fixed in
10.0.2
Also known as
EUVD-2025-2700, WPV-033ebfc800aa
Sources
WPVulnerability

Affected software

SoftwareAffected versions
Pixelyoursite (WordPress plugin)WordPress plugins · wp-plugin:pixelyoursite
  • Every version before 10.0.2

References

  • CVE.org https://www.cve.org/CVERecord?id=CVE-2025-22300
  • Wordfence https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/pixelyoursite/pixelyoursite-your-smart-pixel-tag-manager-10012-cross-site-request-forgery