Data443

Products

ProductCVEsExploitedLatest
Tracking Code Manager4–Oct 15, 2026
Inline Related Posts1–Apr 15, 2024

Exploited and recent CVEs

  • CVE-2026-15180 Medium 6.1 Tracking Code Manager <= 2.6.0 - Reflected Cross-Site Scripting via 'TCM_ErrorMessages' 0.2%
  • CVE-2024-8721 Medium 6.4 Tracking Code Manager <= 2.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.3%
  • CVE-2024-31347 Medium 4.3 WordPress Tracking Code Manager plugin <= 2.1.0 - Broken Access Control vulnerability 0.3%
  • CVE-2024-31426 Medium 4.3 WordPress Inline Related Posts plugin <= 3.3.1 - Cross Site Request Forgery (CSRF) vulnerability 0.2%
  • CVE-2024-2579 Medium 5.9 WordPress Tracking Code Manager plugin <= 2.0.16 - Cross Site Scripting (XSS) vulnerability 0.3%