PixelYourSite WordPress Plugin Sensitive Information Exposure Vulnerability

A vulnerability allowing sensitive information exposure has been identified in the PixelYourSite plugin for WordPress, affecting all versions through 11.1.5. This vulnerability arises from publicly accessible log files that can be viewed by unauthenticated attackers. The issue occurs when the 'Meta API logs' setting is enabled, which is off by default. The vulnerability was partially addressed in version 11.1.5 and fully resolved in version 11.1.5.1.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive information contained in the exposed log files.

Remediation

Users can update to version 11.1.5.1 or a newer patched version to address this vulnerability.