Medium severity6.5NVD Advisory· Published Aug 1, 2026· Updated Aug 26, 2026

CVE-2026-14315

Description

The Pixel Tag Manager for WooCommerce WordPress plugin before 2.2.1 does not perform an authorization check on one of its AJAX actions, allowing unauthenticated users to submit forged e-commerce conversion events to the site's configured server-side advertising conversion APIs using the site's stored credentials.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

WordPress/Pixel Manager for WooCommercellm-fuzzy
Range: <2.2.1

Patches

Vulnerability mechanics

References

wpscan.com/vulnerability/0d7c113a-b677-4687-a077-ec0ec7deff83/nvd

News mentions

No linked articles in our index yet.

cvss	0.423
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000