Read the docs

Conversios

Records8All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9

Exploited now

Conversios records in CISA KEV

No Conversios vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Conversios 3 records MEDIUM Google Analytics Integration For Woocommerce 1 record LOW

Records

3 records in Conversios · all components

TI-2024-01118 CVE-2024-1203 · GHSA-gw98-m2pc-8pgp

SQL injection in tatvic Conversios: Google Analytics , Google Ads, Conversion and…

Priority MEDIUM 42

The Conversios – Google Analytics 4 (GA4), Meta Pixel & more Via Google Tag Manager For WooCommerce plugin for WordPress is vulnerable to SQL Injection via the 'valueData' parameter in all versions up to, and including,…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00821 Published 2024-03-13 No fix listed CWE-89
TI-2021-07231 CVE-2021-24952 · GHSA-rvrx-p6r7-qwxr

Conversios.io < 4.6.2 - Subscriber+ SQL Injection

Priority MEDIUM 41

The Conversios.io WordPress plugin before 4.6.2 does not sanitise, validate and escape the sync_progressive_data parameter for the tvcajax_product_sync_bantch_wise AJAX action before using it in a SQL statement, allowing…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01318 Published 2022-03-07 Fixed in 4.6.2 CWE-89
Open these records in search →