What’s Vulnerable › Products

WPCargo Track & Trace vulnerabilities

8 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 5 published in the last 12 months.

Check whether your WPCargo Track & Trace version is affected

Latest WPCargo Track & Trace vulnerabilities

• CVE-2026-116864 — WordPress WPCargo Track & Trace plugin <= 8.0.5 - PHP Object Injection vulnerability (CVSS 7.2)
• CVE-2026-12713 — WPCargo Track & Trace < 8.0.4 - Unauthenticated SQL Injection via wpcargo_tracking_number (CVSS 9.1)
• CVE-2026-25401 — WordPress WPCargo Track & Trace plugin <= 8.0.2 - Broken Access Control vulnerability (CVSS 7.5)
• CVE-2025-31609 — WordPress WPCargo Track & Trace plugin <= 8.0.2 - Insecure Direct Object References (IDOR) vulnerability (CVSS 4.3)
• CVE-2024-54271 — WordPress WPCargo Track & Trace plugin <= 8.0.2 - Settings Change vulnerability (CVSS 5.4)
• CVE-2024-44004 — WordPress WPCargo Track & Trace plugin <= 8.0.2 - SQL Injection vulnerability (CVSS 9.8)
• CVE-2022-1436 — WPCargo Track & Trace < 6.9.5 - Reflected Cross Site Scripting (CVSS 6.1)
• CVE-2022-1435 — WPCargo Track & Trace < 6.9.5 - Admin+ Stored Cross Site Scripting (CVSS 4.8)