← Back

Tradetracker Store

tradetracker-store

Vendor: Wpaffiliatefeed • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Wpaffiliatefeed
1Tradetracker Store
Jun 17, 2026
Mar 7, 2022
N/A· v4
7.2 HIGH· v3
6.5 MEDIUM· v2
The test parameter of the xmlfeed in the Tradetracker-Store WordPress plugin before 4.6.60 is not sanitised, escaped or validated before inserting to a SQL statement, leading to SQL injection.