Unrated severityNVD Advisory· Published Aug 1, 2026· Updated Aug 3, 2026
Pixel Manager for WooCommerce < 2.2.1 - Unauthenticated Forged Conversion Event Submission
CVE-2026-14315
Description
The Pixel Tag Manager for WooCommerce WordPress plugin before 2.2.1 does not perform an authorization check on one of its AJAX actions, allowing unauthenticated users to submit forged e-commerce conversion events to the site's configured server-side advertising conversion APIs using the site's stored credentials.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- Range: <2.2.1
Patches
Vulnerability mechanics
References
1- wpscan.com/vulnerability/0d7c113a-b677-4687-a077-ec0ec7deff83/mitreexploitvdb-entrytechnical-description
News mentions
0No linked articles in our index yet.