Tracking Code Manager (Data443) - vulnerabilities (CVEs)

4 CVEs, 1 in the last 30 days, 43 known versions, newest CVE from 2026-10-15. Vendor: Data443.

CVEs of Tracking Code Manager

• CVE-2026-15180 - CVSS 6.1 (medium), 2026-10-15: The Tracking Code Manager plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via 'TCM_ErrorMessages' POST Parameter in all versions up to,…
• CVE-2024-6335 - CVSS 4.8 (medium), 2025-05-15: The Tracking Code Manager WordPress plugin before 2.3.0 does not sanitise and escape some of its settings, which could allow high privilege users such as…
• CVE-2024-10309 - CVSS 5.9 (medium), 2025-01-30: The Tracking Code Manager WordPress plugin before 2.4.0 does not sanitise and escape some of its metabox settings when outputing them in the page, which could…
• CVE-2024-8721 - CVSS 6.4 (medium), 2024-12-24: The Tracking Code Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the tracking code field in all versions up to, and including,…
• CVE-2024-31347 - CVSS 4.3 (medium), 2024-06-09: Missing Authorization vulnerability in Data443 Tracking Code Manager.This issue affects Tracking Code Manager: from n/a through 2.1.0.
• CVE-2024-2579 - CVSS 5.9 (medium), 2024-03-21: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Data443 Tracking Code Manager.This issue affects…