CVE-2025-0769 - PixelYourSite 10.1.1.1 - Insecure deserialization

Back Back to CVE browser

MEDIUM

PixelYourSite 10.1.1.1 - Insecure deserialization

Published Feb 28, 2025

6.3

MEDIUM

CVSS 4.0

EPSS 0.39%

Description

PixelYourSite - Your smart PIXEL (TAG) and API Manager 10.1.1.1 was found to be vulnerable. Unvalidated user input is used directly in an unserialize function in myapp/modules/facebook/facebook-server-a sync-task.php.

Affected products

Vendor PixelYourSite Product n/a Default
unaffected
- Version
  10.1.1.1
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

PixelYourSite

n/a

unaffected

Version	Status	Constraints
10.1.1.1	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-502

Deserialization of Untrusted Data

References (2)

https://co.wordpress.org/plugins/pixelyoursite/#developers
release-notes
https://fluidattacks.com/advisories/skims-23/
third-party-advisory

Link	Providers	Tags
https://co.wordpress.org/plugins/pixelyoursite/#developers		release-notes
https://fluidattacks.com/advisories/skims-23/		third-party-advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner Fluid Attacks

Published Feb 28, 2025

Updated Feb 28, 2025

Reserved Jan 28, 2025

Link CVE-2025-0769

CISA Vulnrichment

Updated Feb 28, 2025

NVD

Status Deferred

Modified Jun 17, 2026

Link CVE-2025-0769

Red Hat

Severity n/a

Public date n/a

Links CVE-2025-0769