Pixel Manager For Woocommerce
Monthly
Stored cross-site scripting in WooCommerce Pixel Manager through version 1.69.0 allows an authenticated user with at least Contributor-level WordPress access to inject malicious scripts that execute when a higher-privileged user views the affected content. Exploitation requires WooCommerce and the Pixel Manager plugin to be active, and it is not possible anonymously because a Contributor account must first be obtained or already exist. No public exploit code or CISA KEV activity was identified at time of analysis, and the issue is assessed as moderate severity with limited real-world priority.
Stored cross-site scripting in WooCommerce Pixel Manager through version 1.69.0 allows an authenticated user with at least Contributor-level WordPress access to inject malicious scripts that execute when a higher-privileged user views the affected content. Exploitation requires WooCommerce and the Pixel Manager plugin to be active, and it is not possible anonymously because a Contributor account must first be obtained or already exist. No public exploit code or CISA KEV activity was identified at time of analysis, and the issue is assessed as moderate severity with limited real-world priority.