Vulnerabilities and security researches forpixel-for-web-stories pixel-for-web-stories

Jun 16, 2026

CVE, Research URL: 5ed9955e6e10cc9507f90c35fbae3c45453225f4
Home page URL: Security reports for Pixel & tracking codes for Google Web stories (formerly AMP Stories)
Application: Pixel & tracking codes for Google Web stories (formerly AMP Stories)
Date: Feb 28, 2022
Research Description: Pixel & tracking codes for Google Web stories (formerly AMP Stories) [pixel-for-web-stories] < 1.0.3 WordPress Pixel & tracking codes for Google Web stories (formerly AMP Stories) plugin <= 1.0.2 - Sensitive Information Disclosure vulnerability Sensitive Information Disclosure vulnerability discovered in WordPress Pixel & tracking codes for Google Web stories (formerly AMP Stories) plugin (versions <= 1.0.2).
Affected versions: max 1.0.3.
Status: vulnerable

Jun 13, 2026

CVE, Research URL: CVE-2023-33999
Home page URL: Security reports for Pixel & tracking codes for Google Web stories (formerly AMP Stories)
Application: Pixel & tracking codes for Google Web stories (formerly AMP Stories)
Date: Jun 11, 2026
Research Description: Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in WPVibes WP Mail Log allows DOM-Based XSS. This issue affects WP Mail Log: from n/a through 1.0.2.
Affected versions: max 1.0.5.
Status: vulnerable

Jun 06, 2024

CVE, Research URL: 34ddbeb626035a99cb2bcfa1c64d5610505e800d
Home page URL: Security reports for Pixel & tracking codes for Google Web stories (formerly AMP Stories)
Application: Pixel & tracking codes for Google Web stories (formerly AMP Stories)
Date: Feb 28, 2022
Research Description: Pixel & tracking codes for Google Web stories (formerly AMP Stories) [pixel-for-web-stories] < 1.0.3 WordPress Pixel & tracking codes for Google Web stories (formerly AMP Stories) plugin <= 1.0.2 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability discovered in WordPress Pixel & tracking codes for Google Web stories (formerly AMP Stories) plugin (versions <= 1.0.2).
Affected versions: max 1.0.3.
Status: vulnerable