Gtm4wp

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Gtm4wp records in CISA KEV

No Gtm4wp vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Google Tag Manager 2 records HIGH

Records

2 records

TI-2022-01573 CVE-2022-1707 · GHSA-3f78-pw9p-j3pc

Google Tag Manager for WordPress <= 1.15 - Reflected Cross-Site Scripting via Site Search

HIGH 70

The Google Tag Manager for WordPress plugin for WordPress is vulnerable to reflected Cross-Site Scripting via the s parameter due to the site search populating into the data layer of sites with insufficient sanitization…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.89276 Published 2022-06-13 No fix listed CWE-79

TI-2022-01820 CVE-2022-1961 · GHSA-3jmc-pgpg-8r5g

Google Tag Manager for WordPress (GTM4WP) <= 1.15.1 - Stored Cross-Site Scripting via Content Element ID

MEDIUM 58

The Google Tag Manager for WordPress (GTM4WP) plugin is vulnerable to Stored Cross-Site Scripting due to insufficient escaping via the `gtm4wp-options[scroller-contentid]` parameter found in the `~/public/frontend.php` f…

CVSS 3.1MEDIUM 5.5 Network High privileges No interaction EPSS 0.01138 Published 2022-06-13 No fix listed CWE-79

Open these records in search →

Critical	0
High	0
Medium	2
Low	0
No CVSS	0