iTracker360

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

iTracker360 records in CISA KEV

No iTracker360 vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2026-03081 CVE-2026-3572 · GHSA-7rfx-3hr4-gv82

iTracker360 <= 2.2.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting via 'itracker_license' Settings Field

LOW 27

The iTracker360 plugin for WordPress is vulnerable to Cross-Site Request Forgery leading to Stored Cross-Site Scripting in all versions up to and including 2.2.0.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00286 Published 2026-03-20 No fix listed CWE-79

Open these records in search →

Critical	0
High	0
Medium	1
Low	0
No CVSS	0