Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: tatvic Clear all filters
TI-2024-05835 CVE-2024-6288 · GHSA-3j89-mgwv-f23v

Cross-site scripting in tatvic Conversios: Google Analytics , Google Ads, Conversion and…

Priority LOW 22

The Conversios – Google Analytics 4 (GA4), Meta Pixel & more Via Google Tag Manager For WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘tiktok_user_id’ parameter in all versions…

CVSS 3.1MEDIUM 4.7 Network No auth User interaction EPSS 0.00421 Published 2024-06-28 No fix listed CWE-79
TI-2024-01118 CVE-2024-1203 · GHSA-gw98-m2pc-8pgp

SQL injection in tatvic Conversios: Google Analytics , Google Ads, Conversion and…

Priority MEDIUM 42

The Conversios – Google Analytics 4 (GA4), Meta Pixel & more Via Google Tag Manager For WooCommerce plugin for WordPress is vulnerable to SQL Injection via the 'valueData' parameter in all versions up to, and including,…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00821 Published 2024-03-13 No fix listed CWE-89
TI-2024-00723 CVE-2024-0786 · GHSA-jjvv-2q7q-vxj4

Conversios <= 7.0.7 - Authenticated (Subscriber+) SQL Injection via ee_syncProductCategory

Priority LOW 39

The Conversios – Google Analytics 4 (GA4), Meta Pixel & more Via Google Tag Manager For WooCommerce plugin for WordPress is vulnerable to time-based SQL Injection via the ee_syncProductCategory function using the paramet…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00695 Published 2024-02-28 No fix listed CWE-89