CVE-2026-94674
Received Received - Intake

Contributor XSS in Pixel Manager for WooCommerce

Publication date: 2026-09-30

Last updated on: 2026-09-30

Assigner: Patchstack

Description
Contributor Cross Site Scripting (XSS) in Pixel Manager for WooCommerce <= 1.69.0 versions.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-30
Last Modified
2026-09-30
Generated
2026-09-30
AI Q&A
2026-09-30
EPSS Evaluated
N/A
NVD
CVE-2026-94674
EUVD
EUVD-2026-89848

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
patchstack pixel_manager_for_woocommerce to 1.69.0 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-79 The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a Cross Site Scripting (XSS) vulnerability in the WordPress Pixel Manager for WooCommerce plugin versions 1.69.0 and below. It allows attackers to inject malicious scripts into web pages viewed by users. The vulnerability requires a privileged user to trigger it, such as clicking a malicious link or submitting a form.

Detection Guidance

To detect this XSS vulnerability in the Pixel Manager for WooCommerce plugin, check the installed version of the plugin. If it is 1.69.0 or below, the system is vulnerable. Use WordPress admin panel or run commands like 'wp plugin list' in WP-CLI to verify the version.

Impact Analysis

Attackers could exploit this to steal visitor data, hijack user accounts, or perform unauthorized actions on behalf of users. It may lead to data breaches, loss of sensitive information, or compromised user sessions.

Compliance Impact

This vulnerability could lead to data breaches, which may violate GDPR and HIPAA compliance requirements. Organizations could face fines or penalties if user data is compromised due to inadequate security measures.

Mitigation Strategies

Immediately update the Pixel Manager for WooCommerce plugin to version 1.69.1 or later. Enable auto-update for vulnerable plugins if using Patchstack. Remove or disable the plugin if updates are not possible.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-94674. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart