CyberRota Analysis
AI-GeneratedThe Pixel Tag Manager for WooCommerce plugin prior to version 2.2.1 is vulnerable due to a lack of authorization checks on specific AJAX actions, enabling unauthenticated users to exploit this flaw. This can lead to unauthorized submission of e-commerce conversion events to the site's advertising APIs, potentially compromising stored credentials and affecting the integrity of advertising data. WordPress site administrators using this plugin should prioritize updating to the latest version to mitigate this risk.
Original NVD Description
The Pixel Tag Manager for WooCommerce WordPress plugin before 2.2.1 does not perform an authorization check on one of its AJAX actions, allowing unauthenticated users to submit forged e-commerce conversion events to the site's configured server-side advertising conversion APIs using the site's stored credentials.