CVE-2024-7870: PixelYourSite – Your smart PIXEL (TAG) & API Manager <= 9.7.1 and PixelYourSite PRO <= 10.4.2 - Unauthenticated Information Exposure and Log Deletion
The PixelYourSite – Your smart PIXEL (TAG) & API Manager and the PixelYourSite PRO plugins for WordPress are vulnerable to Sensitive Information Exposure in all versions up to, and including, 9.7.1 and 10.4.2, respectively, through publicly exposed log files. This makes it possible for unauthenticated attackers to view potentially sensitive information contained in the exposed log files, and to delete log files.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2024-7870?
CVE-2024-7870 is classified as a moderate severity vulnerability due to sensitive information exposure through public log files.
How do I fix CVE-2024-7870?
To fix CVE-2024-7870, upgrade the PixelYourSite plugin to version 9.7.2 or later and the PixelYourSite PRO plugin to version 10.4.3 or later.
What versions are affected by CVE-2024-7870?
CVE-2024-7870 affects all versions of PixelYourSite up to 9.7.1 and PixelYourSite PRO up to 10.4.2.
What type of vulnerability is CVE-2024-7870?
CVE-2024-7870 is a sensitive information exposure vulnerability that can potentially reveal confidential data.
Who is impacted by CVE-2024-7870?
Anyone using PixelYourSite versions up to 9.7.1 or PixelYourSite PRO versions up to 10.4.2 on WordPress is impacted by CVE-2024-7870.