CVE-2025-14280: PixelYourSite <= 11.1.5 - Sensitive Information Exposure via Log File
The PixelYourSite plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 11.1.5 through publicly exposed log files. This makes it possible for unauthenticated attackers to view potentially sensitive information contained in the exposed log files, when the "Meta API logs" setting is enabled (disabled by default). The vulnerability was partially patched in version 11.1.5 and fully patched in version 11.1.5.1.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-14280?
CVE-2025-14280 is considered a high severity vulnerability due to its potential for sensitive information exposure.
How do I fix CVE-2025-14280?
To fix CVE-2025-14280, update the PixelYourSite plugin to version 11.1.6 or later.
What types of information are exposed in CVE-2025-14280?
CVE-2025-14280 exposes potentially sensitive information contained in publicly accessible log files.
Who is affected by CVE-2025-14280?
All users of PixelYourSite plugin versions up to and including 11.1.5 are affected by CVE-2025-14280.
Can unauthenticated attackers exploit CVE-2025-14280?
Yes, CVE-2025-14280 can be exploited by unauthenticated attackers to gain access to sensitive information.