Data443

Tracking Code Manager

4 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.1

CVE-2026-28172

  • EPSS 0.1%
  • Veröffentlicht 06.08.2026 14:27:13
  • Zuletzt bearbeitet 12.08.2026 20:58:37

Unauthenticated Cross Site Request Forgery (CSRF) in Tracking Code Manager <= 2.6.0 versions.

4.8

CVE-2024-6335

Exploit
  • EPSS 0.35%
  • Veröffentlicht 15.05.2025 20:15:54
  • Zuletzt bearbeitet 11.06.2025 15:46:57

The Tracking Code Manager WordPress plugin before 2.3.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is...

5.9

CVE-2024-10309

Exploit
  • EPSS 0.26%
  • Veröffentlicht 30.01.2025 06:15:28
  • Zuletzt bearbeitet 11.05.2025 23:38:49

The Tracking Code Manager WordPress plugin before 2.4.0 does not sanitise and escape some of its metabox settings when outputing them in the page, which could allow users with a role as low as Contributor to perform Cross-Site Scripting attacks.

6.4

CVE-2024-8721

  • EPSS 0.34%
  • Veröffentlicht 24.12.2024 10:15:06
  • Zuletzt bearbeitet 15.04.2026 00:35:42

The Tracking Code Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the tracking code field in all versions up to, and including, 2.3.0 due to insufficient input sanitization and output escaping. This makes it possible for...