Arni Cinco

Products

ProductCVEsExploitedLatest
WPCargo Track & Trace5–Oct 29, 2026
Subscription Form for Feedblitz1–Apr 1, 2025

Exploited and recent CVEs

  • CVE-2026-116864 High 7.2 WordPress WPCargo Track & Trace plugin <= 8.0.5 - PHP Object Injection vulnerability 0.3%
  • CVE-2026-25401 High 7.5 WordPress WPCargo Track & Trace plugin <= 8.0.2 - Broken Access Control vulnerability 0.3%
  • CVE-2025-31745 Medium 6.5 WordPress Subscription Form for Feedblitz Plugin <= 1.0.9 - Cross Site Scripting (XSS) vulnerability 0.4%
  • CVE-2025-31609 Medium 4.3 WordPress WPCargo Track & Trace plugin <= 8.0.2 - Insecure Direct Object References (IDOR) vulnerability 0.3%
  • CVE-2024-54271 Medium 5.4 WordPress WPCargo Track & Trace plugin <= 8.0.2 - Settings Change vulnerability 0.5%
  • CVE-2024-44004 Critical 9.3 WordPress WPCargo Track & Trace plugin <= 8.0.2 - SQL Injection vulnerability 0.5%