wecantrack

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

wecantrack records in CISA KEV

No wecantrack vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Affiliate Links 1 record MEDIUM

Records

3 records

TI-2024-12597 CVE-2024-13556 · GHSA-7229-ccxj-3pgp

Missing authorization in wecantrack Affiliate Links – Link Cloaking and Management

MEDIUM 44

The Affiliate Links: WordPress Plugin for Link Cloaking and Link Management plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.0.1 via deserialization of untrusted input fr…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00586 Published 2025-02-18 No fix listed CWE-862

TI-2025-23704 CVE-2025-32639 · GHSA-p35x-v2w9-c8gg

WordPress Affiliate Links plugin <= 3.1.0 - Reflected Cross Site Scripting (XSS) vulnerability

LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wecantrack Affiliate Links Lite affiliate-links allows Reflected XSS.This issue affects Affiliate Links Lite: from n/a…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00293 Published 2025-04-17 No fix listed CWE-79

TI-2024-11655 CVE-2024-12561 · GHSA-9m66-g6x7-m6cw

Affiliate Sales in Google Analytics and other tools <= 2.0.0 - Open Redirect

LOW 27

The Affiliate Sales in Google Analytics and other tools plugin for WordPress is vulnerable to Open Redirect in all versions up to, and including, 2.0.0.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00357 Published 2025-05-21 No fix listed CWE-601

Open these records in search →

Critical	1
High	1
Medium	1
Low	0
No CVSS	0