Data443 - vulnerabilities (CVEs)

12 CVEs in 3 products, 1 in the last 30 days, newest from 2026-10-15.

Products

Newest CVEs of Data443

CVE-2026-15180 - CVSS 6.1 (medium), 2026-10-15: The Tracking Code Manager plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via 'TCM_ErrorMessages' POST Parameter in all versions up to,…
CVE-2024-6335 - CVSS 4.8 (medium), 2025-05-15: The Tracking Code Manager WordPress plugin before 2.3.0 does not sanitise and escape some of its settings, which could allow high privilege users such as…
CVE-2024-13621 - CVSS 4.8 (medium), 2025-05-15: The GDPR Framework By Data443 WordPress plugin before 2.2.0 does not sanitise and escape some of its settings, which could allow high privilege users such as…
CVE-2024-10309 - CVSS 5.9 (medium), 2025-01-30: The Tracking Code Manager WordPress plugin before 2.4.0 does not sanitise and escape some of its metabox settings when outputing them in the page, which could…
CVE-2024-8721 - CVSS 6.4 (medium), 2024-12-24: The Tracking Code Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the tracking code field in all versions up to, and including,…
CVE-2024-6487 - CVSS 5.9 (medium), 2024-07-29: The Inline Related Posts WordPress plugin before 3.8.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin…
CVE-2024-5626 - CVSS 6.1 (medium), 2024-07-12: The Inline Related Posts WordPress plugin before 3.7.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected…
CVE-2024-31347 - CVSS 4.3 (medium), 2024-06-09: Missing Authorization vulnerability in Data443 Tracking Code Manager.This issue affects Tracking Code Manager: from n/a through 2.1.0.
CVE-2024-31426 - CVSS 4.3 (medium), 2024-04-15: Cross-Site Request Forgery (CSRF) vulnerability in Data443 Inline Related Posts.This issue affects Inline Related Posts: from n/a through 3.3.1.
CVE-2023-6257 - CVSS 4.3 (medium), 2024-04-11: The Inline Related Posts WordPress plugin before 3.6.0 is missing authorization in an AJAX action to ensure that users are allowed to see the content of the…
CVE-2024-2444 - CVSS 4.8 (medium), 2024-04-06: The Inline Related Posts WordPress plugin before 3.5.0 does not sanitise and escape some of its settings, which could allow high privilege users such as Admin…
CVE-2024-2579 - CVSS 5.9 (medium), 2024-03-21: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Data443 Tracking Code Manager.This issue affects…