PixelYourSite

An improper authorization vulnerability in the EDD Product Catalog Feed plugin allows authenticated subscribers to delete arbitrary site options, leading to a denial of service.

The Cost of Goods by PixelYourSite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'csvdata[0][cost_of_goods_value]' parameter in versions up to, and including, 1.2.12 due to insufficient input sanitization and output escaping, allowing unauthenticated attackers to inject arbitrary web scripts that execute when a user accesses an injected page.