Advisories · Technology

Product Catalog Feed by PixelYourSite.

Every CVE that names Product Catalog Feed by PixelYourSite among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-118078 CVE record

CVSS 7.2 High

WordPress Product Catalog Feed by PixelYourSite plugin <= 3.1.4 - PHP Object Injection vulnerability
- Product Catalog Feed by PixelYourSite
- Insecure deserialization
Not analysed yet 29 Oct 2026
CVE-2023-49824 CVE record

CVSS 5.4 Medium

WordPress Product Catalog Feed by PixelYourSite Plugin <= 2.1.1 is vulnerable to Cross Site Request Forgery (CSRF)
- Product Catalog Feed by PixelYourSite
- Cross-site request forgery (CSRF)
Not analysed yet 17 Dec 2023
CVE-2023-1804 CVE record

CVSS 6.1 Medium

Product Catalog Feed by PixelYourSite < 2.1.1 - Reflected XSS
- Product Catalog Feed by PixelYourSite
- Cross-site scripting (XSS)
Not analysed yet 2 May 2023
CVE-2023-1805 CVE record

CVSS 6.1 Medium

Product Catalog Feed by PixelYourSite < 2.1.1 - Reflected XSS
- Product Catalog Feed by PixelYourSite
- Cross-site scripting (XSS)
Not analysed yet 2 May 2023