Read the docs

Tracktheclick

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Tracktheclick records in CISA KEV

No Tracktheclick vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

1 record

Priority HIGH 71

The Track The Click WordPress plugin before 0.3.12 does not properly sanitize query parameters to the stats REST endpoint before using them in a database query, allowing a logged in user with an author role or higher to…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.011 Published 2024-01-17 Fixed in 0.3.12 CWE-89
Open these records in search →