PixelYourSite Pro 12.5.3

You can select the order status that will trigger Advanced Purchase Tracking for WooCommerce.
Security improvements.
Fixing a possible issue with the add to cart event sending an incorrect post type parameter.
Fixing a possible issue with UTM parameter detection for WooCommerce.
Removing WooCommerce CompleteRegistration Meta event that was used to send profit, since we now have a dedicated ProfitConversion event in place.
Improvements to how we display license status.
Compatibility with the recent changes in the Bing add-on.
Various code improvements.

We have identified and fixed a security vulnerability (XSS) in older versions of our plugin (≤12.4.0.3).

We strongly recommend updating immediately to version 12.4.1.

Under specific conditions, this vulnerability could allow an attacker to execute malicious scripts within an authenticated administrator session. In some cases, this may have enabled unauthorized creation of WooCommerce REST API keys or orders with falsified data.

The vulnerability has been fully patched in the latest version of the plugin.

Required Actions:

1. Update the plugin to the latest version immediately.
2. Reset all administrator passwords.
3. Review the list of administrator users and remove any unfamiliar accounts.
4. Review WooCommerce → Advanced → REST API and delete any unknown or suspicious API keys.
5. As an extra precaution, you can also regenerate existing REST API keys. Replace them in the services that use them.

As a precaution, we also recommend enabling two-factor authentication (2FA) for all administrator accounts.

Fixing a possible issue resulting in missing value for some e-commerce events.
Fixing a possible issue with permissions for super admin roles.
Fixing a TypeError related to Fluent forms.
Fixing an error related to form fields events for OptimisePress Overlay Popup.
Removing legacy code related to old Google UA properties.

Event Setup Tool: a better way to configure tracking events without coding, helping you to track any relevant actions on the site.

Fixing an issue with the FirstTimeBuyer and ReturnCustomer events not being fired.

Safeguards against sending server events for orders placed via the WooCommerce API (for example, PayPal for WooCommerce by AngellEYE)
Code improvements and security fixes.

Fixing some possible issues with Google Analytics Measurement Protocol tracking for WooCommerce or Easy Digital Downloads purchase events.
Fixing a bug related to Easy Digital Downloads Uncaught Error: Class “PixelYourSite\EDD_Payment” not found.

Improved set of parameters for the API events, especially Purchase events for WooCommerce and EDD.
New logs section for the plugin’s own activity, useful for debugging. In previous versions, this data was logged in the Meta API logs.
Improvements to the API queue system, including a new option for AJAX events, purge options, and better speed.
Schedule event added to the standard events list for TikTok, Events page.
Fix for a possible issue with PixelYourSite Pro calling WooCommerce code too early.
Other code improvements.

Additional improvements to the way we handle the API logs.

Improvements to the way we handle the API logs.