Arni Cinco
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| WPCargo Track & Trace | 5 | – | Oct 29, 2026 |
| Subscription Form for Feedblitz | 1 | – | Apr 1, 2025 |
Exploited and recent CVEs
- CVE-2026-116864 WordPress WPCargo Track & Trace plugin <= 8.0.5 - PHP Object Injection vulnerability 0.3%
- CVE-2026-25401 WordPress WPCargo Track & Trace plugin <= 8.0.2 - Broken Access Control vulnerability 0.3%
- CVE-2025-31745 WordPress Subscription Form for Feedblitz Plugin <= 1.0.9 - Cross Site Scripting (XSS) vulnerability 0.4%
- CVE-2025-31609 WordPress WPCargo Track & Trace plugin <= 8.0.2 - Insecure Direct Object References (IDOR) vulnerability 0.3%
- CVE-2024-54271 WordPress WPCargo Track & Trace plugin <= 8.0.2 - Settings Change vulnerability 0.5%
- CVE-2024-44004 WordPress WPCargo Track & Trace plugin <= 8.0.2 - SQL Injection vulnerability 0.5%