PT-2024-38647 · WordPress · Pixelyoursite Pro+1

Grant Grubbs

+1

·

Published

2024-09-04

·

Updated

2024-10-07

·

CVE-2024-7870

CVSS v3.1

7.5

High

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions PixelYourSite – Your smart PIXEL (TAG) & API Manager versions up to and including 9.7.1 PixelYourSite PRO versions up to and including 10.4.2
Description The vulnerability allows unauthenticated attackers to view potentially sensitive information contained in publicly exposed log files and to delete log files. This issue affects the PixelYourSite and PixelYourSite PRO plugins for WordPress.
Recommendations For PixelYourSite – Your smart PIXEL (TAG) & API Manager versions up to and including 9.7.1, update to a version later than 9.7.1 to resolve the issue. For PixelYourSite PRO versions up to and including 10.4.2, update to a version later than 10.4.2 to resolve the issue. As a temporary workaround, consider restricting access to the publicly exposed log files to minimize the risk of exploitation.

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2024-7870

Affected Products

Pixelyoursite
Pixelyoursite Pro