Unknown WPCargo Track & Trace

• CVE-2026-12713 Critical 9.1 WPCargo Track & Trace < 8.0.4 - Unauthenticated SQL Injection via wpcargo_tracking_number 0.5%
• CVE-2022-1436 Unrated WPCargo Track & Trace < 6.9.5 - Reflected Cross Site Scripting 0.8%
• CVE-2022-1435 Unrated WPCargo Track & Trace < 6.9.5 - Admin+ Stored Cross Site Scripting 0.6%
• CVE-2021-25003 Unrated WPCargo < 6.9.0 - Unauthenticated RCE 56.1%