PixelYourSite Vulnerable to Sensitive Information Exposure

CVE-2024-7870

Summary

The PixelYourSite and PixelYourSite PRO plugins for WordPress are affected by a vulnerability that exposes sensitive information through log files that are publicly accessible. This risk exists in all versions up to and including 9.7.1 and 10.4.2, respectively. Attackers without authentication can view sensitive data contained within these log files, posing a significant security risk. Additionally, this vulnerability allows for the unauthorized deletion of log files, which can further compromise data integrity. Ensuring that these plugins are updated and properly configured is essential for maintaining the security of WordPress sites utilizing these tools.

References