WordPress plugin
PixelYourSite Pro – Your smart PIXEL (TAG) Manager security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 6 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High3
- Medium3
- Low0
All PixelYourSite Pro – Your smart PIXEL (TAG) Manager vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| High7.2 | Unauthenticated Stored Cross-Site Scripting <12.6.8Update to 12.6.8 | CVE-2026-109987 | |
| Medium5.3 | Unauthenticated Sensitive Information Exposure via Order-Received Endpoint Missing Key Validation <12.6.1Update to 12.6.1 | CVE-2026-18059 | |
| High7.2 | Unauthenticated Blind Server-Side Request Forgery via 'urls[]' Parameter ≤12.5.0.1Update to 12.5.0.2 | CVE-2026-7049 | |
| High7.2 | Unauthenticated Stored Cross-Site Scripting ≤12.4.0.2Update to 12.4.0.3 | CVE-2026-1844 | |
| Medium6.5 | Unauthenticated Information Exposure and Log Deletion ≤10.4.2Update to 10.4.3 | CVE-2024-7870 | |
| Medium4.4 | Authenticated (Administrator+) Stored Cross-Site Scripting ≤9.6.1Update to 9.6.2 | CVE-2023-2584 |
- High7.2Unauthenticated Stored Cross-Site Scripting
<12.6.8Update to 12.6.8
- Medium5.3Unauthenticated Sensitive Information Exposure via Order-Received Endpoint Missing Key Validation
<12.6.1Update to 12.6.1
- High7.2Unauthenticated Blind Server-Side Request Forgery via 'urls[]' Parameter
≤12.5.0.1Update to 12.5.0.2
- High7.2Unauthenticated Stored Cross-Site Scripting
≤12.4.0.2Update to 12.4.0.3
- Medium6.5Unauthenticated Information Exposure and Log Deletion
≤10.4.2Update to 10.4.3
- Medium4.4Authenticated (Administrator+) Stored Cross-Site Scripting
≤9.6.1Update to 9.6.2
PixelYourSite Pro – Your smart PIXEL (TAG) Manager: common questions
Does PixelYourSite Pro – Your smart PIXEL (TAG) Manager have known vulnerabilities?
Yes. VulnCrest Radar lists 6 known vulnerabilities in PixelYourSite Pro – Your smart PIXEL (TAG) Manager: 3 high, 3 medium. None are known to affect version null.
How do I check which version of PixelYourSite Pro – Your smart PIXEL (TAG) Manager I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent PixelYourSite Pro – Your smart PIXEL (TAG) Manager vulnerability?
CVE-2026-109987, published Oct 20, 2026: PixelYourSite (Pro + Free) – Your smart PIXEL (TAG) Manager (plugin) < 11.4.3 - Unauthenticated Stored Cross-Site Scripting. Severity: High (CVSS 7.2).
Is any PixelYourSite Pro – Your smart PIXEL (TAG) Manager vulnerability listed in CISA KEV?
No. None of the known PixelYourSite Pro – Your smart PIXEL (TAG) Manager vulnerabilities is currently listed in the CISA KEV catalog.