Filtered by vendor Tracktheclick Subscriptions
Total 1 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2023-5041 1 Tracktheclick 1 Track The Click 2024-11-21 8.8 High
The Track The Click WordPress plugin before 0.3.12 does not properly sanitize query parameters to the stats REST endpoint before using them in a database query, allowing a logged in user with an author role or higher to perform time based blind SQLi attacks on the database.