Filtered by vendor Wptaskforce Subscriptions
Filtered by product Track \& Trace Subscriptions
Total 3 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2022-1436 1 Wptaskforce 1 Track \& Trace 2024-11-21 6.1 Medium
The WPCargo Track & Trace WordPress plugin before 6.9.5 does not sanitise and escape the wpcargo_tracking_number parameter before outputting it back in the page, which could allow attackers to perform reflected Cross-Site Scripting attacks.
CVE-2022-1435 1 Wptaskforce 1 Track \& Trace 2024-11-21 4.8 Medium
The WPCargo Track & Trace WordPress plugin before 6.9.5 does not sanitize and escapes some of its settings, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed.
CVE-2024-44004 1 Wptaskforce 2 Track \& Trace, Wpcargo Track \& Trace 2024-09-24 9.3 Critical
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPTaskForce WPCargo Track & Trace allows SQL Injection.This issue affects WPCargo Track & Trace: from n/a through 7.0.6.