WordPress plugin

PixelYourSite – Your smart PIXEL (TAG) & API Manager security & vulnerabilities

Q: Does PixelYourSite – Your smart PIXEL (TAG) & API Manager have known vulnerabilities?

Yes. VulnCrest Radar lists 14 known vulnerabilities in PixelYourSite – Your smart PIXEL (TAG) & API Manager: 3 high, 11 medium. None are known to affect version null.

Q: How do I check which version of PixelYourSite – Your smart PIXEL (TAG) & API Manager I run?

In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.

Q: What is the most recent PixelYourSite – Your smart PIXEL (TAG) & API Manager vulnerability?

CVE-2026-109987, published Oct 20, 2026: PixelYourSite (Pro + Free) – Your smart PIXEL (TAG) Manager (plugin) < 11.4.3 - Unauthenticated Stored Cross-Site Scripting. Severity: High (CVSS 7.2).

Q: Is any PixelYourSite – Your smart PIXEL (TAG) & API Manager vulnerability listed in CISA KEV?

No. None of the known PixelYourSite – Your smart PIXEL (TAG) & API Manager vulnerabilities is currently listed in the CISA KEV catalog.

pixelyoursite— active installsLast vulnerability Oct 20, 2026

No known unpatched vulnerabilities in the latest version

All 14 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.

Watch plugin

14Known vulnerabilities

Critical0
High3
Medium11
Low0

Vulnerabilities per year

All PixelYourSite – Your smart PIXEL (TAG) & API Manager vulnerabilities

PixelYourSite – Your smart PIXEL (TAG) & API Manager vulnerabilities
Severity	Vulnerability	CVE	Published
High7.2	Unauthenticated Stored Cross-Site Scripting <12.6.8Update to 12.6.8	CVE-2026-109987	Oct 20
High7.2	Unauthenticated Stored Cross-Site Scripting ≤11.2.0Update to 11.2.0.1	CVE-2026-1841	Feb 13
High8.1	Unauthenticated PHP Object Injection 10.1.1.1 – 10.1.1.1Update to 10.1.1.2	CVE-2025-0769	Feb 28, 2025

High7.2
Unauthenticated Stored Cross-Site Scripting
<12.6.8Update to 12.6.8
CVE-2026-109987Oct 20
High7.2
Unauthenticated Stored Cross-Site Scripting
≤11.2.0Update to 11.2.0.1
CVE-2026-1841Feb 13
High8.1
Unauthenticated PHP Object Injection
10.1.1.1 – 10.1.1.1Update to 10.1.1.2
CVE-2025-0769Feb 28, 2025

PixelYourSite – Your smart PIXEL (TAG) & API Manager: common questions

Does PixelYourSite – Your smart PIXEL (TAG) & API Manager have known vulnerabilities?

Yes. VulnCrest Radar lists 14 known vulnerabilities in PixelYourSite – Your smart PIXEL (TAG) & API Manager: 3 high, 11 medium. None are known to affect version null.

How do I check which version of PixelYourSite – Your smart PIXEL (TAG) & API Manager I run?

In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.

What is the most recent PixelYourSite – Your smart PIXEL (TAG) & API Manager vulnerability?

CVE-2026-109987, published Oct 20, 2026: PixelYourSite (Pro + Free) – Your smart PIXEL (TAG) Manager (plugin) < 11.4.3 - Unauthenticated Stored Cross-Site Scripting. Severity: High (CVSS 7.2).

Is any PixelYourSite – Your smart PIXEL (TAG) & API Manager vulnerability listed in CISA KEV?

No. None of the known PixelYourSite – Your smart PIXEL (TAG) & API Manager vulnerabilities is currently listed in the CISA KEV catalog.