THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-18059 (MEDIUM 5.3) — The PixelYourSite – Your smart PIXEL (TAG) & API Manager plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 11.2.1 via the getWooPurchaseEventParams. This makes it possible for unauthenticated attackers to extract WooCommerc

[NVD] CVE-2026-18059 (MEDIUM 5.3) — The PixelYourSite – Your smart PIXEL (TAG) & API Manager plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 11.2.1 via the getWooPurchaseEventParams. This makes it possible for unauthenticated attackers to extract WooCommerc

mednvdPublished 2026-08-01

CVE-2026-18059 CVSS: 5.3 MEDIUM Published: 2026-08-01T09:17:01.963

The PixelYourSite – Your smart PIXEL (TAG) & API Manager plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 11.2.1 via the getWooPurchaseEventParams. This makes it possible for unauthenticated attackers to extract WooCommerce purchase metadata — including product names, produ

MITRE ATT&CK techniques

JavaScriptT1059.007

Indicators of compromise

CVE-2026-18059cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-18059