wpcargo

WordPress · Plugin

9 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
WPCargo Track & Trace <= 8.0.5 - Missing AuthorizationCVE-2026-25401	wpcargo	WordPress	Medium	Fix reported	2026-11-11
WPCargo Track & Trace <= 8.0.5 - Authenticated (Author+) PHP Object InjectionCVE-2026-116864	wpcargo	WordPress	High	No fix reported	2026-11-03
WPCargo Track & Trace <= 8.0.3 - Unauthenticated SQL InjectionCVE-2026-12713	wpcargo	WordPress	High	Fix reported	2026-08-16
WPCargo Track & Trace <= 8.0.3 - Unauthenticated SQL InjectionCVE-2024-44004	wpcargo	WordPress	High	Fix reported	2026-08-14
WPCargo Track & Trace <= 8.0.1 - Authenticated (Contributor+) Insecure Direct Object ReferenceCVE-2025-31609	wpcargo	WordPress	Medium	No fix reported	2025-05-21
WPCargo Track & Trace <= 8.0.1 - Missing authorization to Authenticated (Subscriber+) Settings UpdateCVE-2024-54271	wpcargo	WordPress	Medium	No fix reported	2025-05-21
WPCargo Track & Trace <= 6.9.4 - Reflected Cross-Site ScriptingCVE-2022-1436	wpcargo	WordPress	Medium	Fix reported	2024-01-22
WPCargo Track & Trace <= 6.9.4 - Admin+ Stored Cross Site ScriptingCVE-2022-1435	wpcargo	WordPress	Medium	Fix reported	2024-01-22
WPCargo <= 6.8.9 - Unauthenticated Remote Code ExecutionCVE-2021-25003	wpcargo	WordPress	Critical	Fix reported	2024-01-22