← Back

Tracktheclick

tracktheclick

1 CVE • 1 product

Products (1)

Click to collapse
Toggle
Track The Click
track_the_click
1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2023-5041
1Tracktheclick
1Track The Click
Jun 17, 2026
Jan 17, 2024
N/A· v4
8.8 HIGH· v3
N/A· v2
The Track The Click WordPress plugin before 0.3.12 does not properly sanitize query parameters to the stats REST endpoint before using them in a database query, allowing a logged in user with an author role or higher to...Show more
The Track The Click WordPress plugin before 0.3.12 does not properly sanitize query parameters to the stats REST endpoint before using them in a database query, allowing a logged in user with an author role or higher to perform time based blind SQLi attacks on the database.Show less