← Back

Wptaskforce

wptaskforce

4 CVEs • 2 products

Products (2)

Click to collapse
Toggle
Track & Trace
track_&_trace
3 CVEs
Wpcargo Track & Trace
wpcargo_track_&_trace
1 CVE

CVEs (4)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2024-44004
1Wptaskforce
1Track & Trace
Apr 23, 2026
Sep 17, 2024
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Arni Cinco WPCargo Track & Trace wpcargo allows SQL Injection.This issue affects WPCargo Track & Trace: from n/a throu...Show more
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Arni Cinco WPCargo Track & Trace wpcargo allows SQL Injection.This issue affects WPCargo Track & Trace: from n/a through <= 8.0.2.Show less
CVE-2022-1436
1Wptaskforce
1Track & Trace
Nov 21, 2024
May 16, 2022
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
The WPCargo Track & Trace WordPress plugin before 6.9.5 does not sanitise and escape the wpcargo_tracking_number parameter before outputting it back in the page, which could allow attackers to perform reflected Cross-Sit...Show more
The WPCargo Track & Trace WordPress plugin before 6.9.5 does not sanitise and escape the wpcargo_tracking_number parameter before outputting it back in the page, which could allow attackers to perform reflected Cross-Site Scripting attacks.Show less
CVE-2022-1435
1Wptaskforce
1Track & Trace
Nov 21, 2024
May 16, 2022
N/A· v4
4.8 MEDIUM· v3
3.5 LOW· v2
The WPCargo Track & Trace WordPress plugin before 6.9.5 does not sanitize and escapes some of its settings, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when unfiltere...Show more
The WPCargo Track & Trace WordPress plugin before 6.9.5 does not sanitize and escapes some of its settings, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed.Show less
CVE-2021-25003
1Wptaskforce
1Wpcargo Track & Trace
Nov 21, 2024
Mar 14, 2022
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
The WPCargo Track & Trace WordPress plugin before 6.9.0 contains a file which could allow unauthenticated attackers to write a PHP file anywhere on the web server, leading to RCE