WordPress plugin

PixelYourSite Pro – Your smart PIXEL (TAG) Manager security & vulnerabilities

Q: Does PixelYourSite Pro – Your smart PIXEL (TAG) Manager have known vulnerabilities?

Yes. VulnCrest Radar lists 6 known vulnerabilities in PixelYourSite Pro – Your smart PIXEL (TAG) Manager: 3 high, 3 medium. None are known to affect version null.

Q: How do I check which version of PixelYourSite Pro – Your smart PIXEL (TAG) Manager I run?

In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.

Q: What is the most recent PixelYourSite Pro – Your smart PIXEL (TAG) Manager vulnerability?

CVE-2026-109987, published Oct 20, 2026: PixelYourSite (Pro + Free) – Your smart PIXEL (TAG) Manager (plugin) < 11.4.3 - Unauthenticated Stored Cross-Site Scripting. Severity: High (CVSS 7.2).

Q: Is any PixelYourSite Pro – Your smart PIXEL (TAG) Manager vulnerability listed in CISA KEV?

No. None of the known PixelYourSite Pro – Your smart PIXEL (TAG) Manager vulnerabilities is currently listed in the CISA KEV catalog.

pixelyoursite-pro— active installsLast vulnerability Oct 20, 2026

No known unpatched vulnerabilities in the latest version

All 6 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.

Watch plugin

6Known vulnerabilities

Critical0
High3
Medium3
Low0

Vulnerabilities per year

All PixelYourSite Pro – Your smart PIXEL (TAG) Manager vulnerabilities

PixelYourSite Pro – Your smart PIXEL (TAG) Manager vulnerabilities
Severity	Vulnerability	CVE	Published
High7.2	Unauthenticated Stored Cross-Site Scripting <12.6.8Update to 12.6.8	CVE-2026-109987	Oct 20
High7.2	Unauthenticated Blind Server-Side Request Forgery via 'urls[]' Parameter ≤12.5.0.1Update to 12.5.0.2	CVE-2026-7049	May 01
High7.2	Unauthenticated Stored Cross-Site Scripting ≤12.4.0.2Update to 12.4.0.3	CVE-2026-1844	Feb 13

High7.2
Unauthenticated Stored Cross-Site Scripting
<12.6.8Update to 12.6.8
CVE-2026-109987Oct 20
High7.2
Unauthenticated Blind Server-Side Request Forgery via 'urls[]' Parameter
≤12.5.0.1Update to 12.5.0.2
CVE-2026-7049May 01
High7.2
Unauthenticated Stored Cross-Site Scripting
≤12.4.0.2Update to 12.4.0.3
CVE-2026-1844Feb 13

PixelYourSite Pro – Your smart PIXEL (TAG) Manager: common questions

Does PixelYourSite Pro – Your smart PIXEL (TAG) Manager have known vulnerabilities?

Yes. VulnCrest Radar lists 6 known vulnerabilities in PixelYourSite Pro – Your smart PIXEL (TAG) Manager: 3 high, 3 medium. None are known to affect version null.

How do I check which version of PixelYourSite Pro – Your smart PIXEL (TAG) Manager I run?

In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.

What is the most recent PixelYourSite Pro – Your smart PIXEL (TAG) Manager vulnerability?

CVE-2026-109987, published Oct 20, 2026: PixelYourSite (Pro + Free) – Your smart PIXEL (TAG) Manager (plugin) < 11.4.3 - Unauthenticated Stored Cross-Site Scripting. Severity: High (CVSS 7.2).

Is any PixelYourSite Pro – Your smart PIXEL (TAG) Manager vulnerability listed in CISA KEV?

No. None of the known PixelYourSite Pro – Your smart PIXEL (TAG) Manager vulnerabilities is currently listed in the CISA KEV catalog.