Live Vulnerability Intelligence
Threat Database
Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.
Threat Entry
Updated 2026-10-30
WPCargo Track & Trace - Security Vulnerability (CVE-2026-116864)
Author PHP Object Injection in WPCargo Track & Trace
PLUGIN
WPCargo Track & Trace
CVE-2026-116864
Risk Score
Threat Entry
Updated 2026-08-26
WPCargo Track & Trace - SQL Injection (CVE-2026-12713)
The WPCargo Track & Trace WordPress plugin before 8.0.4 does not properly sanitise and escape a parameter before using it in a SQL statement, allowing unauthenticated users to perform SQL injection attacks. This affects a code path distinct from the one addressed by CVE-2024-44004.
PLUGIN
WPCargo Track & Trace
CVE-2026-12713
Risk Score
Threat Entry
Updated 2026-06-17
WPCargo Track & Trace - Cross-Site Scripting (XSS) (CVE-2022-1436)
The WPCargo Track & Trace WordPress plugin before 6.9.5 does not sanitise and escape the wpcargo_tracking_number parameter before outputting it back in the page, which could allow attackers to perform reflected Cross-Site Scripting attacks.
PLUGIN
WPCargo Track & Trace
CVE-2022-1436
Risk Score
Threat Entry
Updated 2026-06-17
WPCargo Track & Trace - Cross-Site Scripting (XSS) (CVE-2022-1435)
The WPCargo Track & Trace WordPress plugin before 6.9.5 does not sanitize and escapes some of its settings, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed.
PLUGIN
WPCargo Track & Trace
CVE-2022-1435
Risk Score
Threat Entry
Updated 2026-06-17
WPCargo Track & Trace - Remote Code Execution (CVE-2021-25003)
The WPCargo Track & Trace WordPress plugin before 6.9.0 contains a file which could allow unauthenticated attackers to write a PHP file anywhere on the web server, leading to RCE
PLUGIN
WPCargo Track & Trace
CVE-2021-25003
Risk Score