← Back

Track The Click

track_the_click

Vendor: Tracktheclick • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2023-5041
1Tracktheclick
1Track The Click
Jun 17, 2026
Jan 17, 2024
N/A· v4
8.8 HIGH· v3
N/A· v2
The Track The Click WordPress plugin before 0.3.12 does not properly sanitize query parameters to the stats REST endpoint before using them in a database query, allowing a logged in user with an author role or higher to...Show more
The Track The Click WordPress plugin before 0.3.12 does not properly sanitize query parameters to the stats REST endpoint before using them in a database query, allowing a logged in user with an author role or higher to perform time based blind SQLi attacks on the database.Show less