Plugin icon

WPCargo Track & Trace

wpcargo

Vulnerabilities:

7

Last Updated:

July 23, 2025

Active Installs:

10000

Published
Title
Fixed in
CVSS
Published
2026-03-23
Title
WPCargo Track & Trace <= 8.0.2 - Missing Authorization
Fixed in
No known fix
CVSS
5.3 (medium)
Published
2025-03-31
Title
WPCargo Track & Trace <= 8.0.2 - Contributor+ Insecure Direct Object Reference
Fixed in
No known fix
CVSS
2.7 (low)
Published
2024-12-11
Title
WPCargo Track & Trace <= 8.0.2 - Subscriber+ Settings Update
Fixed in
No known fix
CVSS
4.3 (medium)
Published
2024-09-16
Title
WPCargo Track & Trace <= 8.0.2 - Unauthenticated SQL Injection
Fixed in
No known fix
CVSS
7.5 (high)
Published
2022-04-25
Title
WPCargo Track & Trace < 6.9.5 - Reflected Cross Site Scripting
Fixed in
Fixed in 6.9.5
CVSS
6.1 (medium)
Published
2022-04-25
Title
WPCargo Track & Trace < 6.9.5 - Admin+ Stored Cross Site Scripting
Fixed in
Fixed in 6.9.5
CVSS
3.4 (low)
Published
2022-02-21
Title
WPCargo < 6.9.0 - Unauthenticated RCE
Fixed in
Fixed in 6.9.0
CVSS
10.0 (critical)