Data443

4 CVEs across 5 Data443 products. Browse Data443 vulnerabilities, severities, and proof-of-concept exploits.

Data443 products with known CVEs

ProductCVEs
Inline Related Posts4
Tracking Code Manager3
Tracking Code Manager2
Gdpr Framework1
Inline Related Posts1
Data443 CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2024-6335Medium4.82025-05-15The Tracking Code Manager WordPress plugin before 2.3.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin…
CVE-2024-13621Medium4.82025-05-15The GDPR Framework By Data443 WordPress plugin before 2.2.0 does not sanitise and escape some of its settings, which could allow high privilege users such as a…
CVE-2024-10309Medium5.92025-01-30The Tracking Code Manager WordPress plugin before 2.4.0 does not sanitise and escape some of its metabox settings when outputing them in the page, which could…
CVE-2024-8721Medium6.42024-12-24The Tracking Code Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the tracking code field in all versions up to, and including, 2…
CVE-2024-6487Medium5.92024-07-29The Inline Related Posts WordPress plugin before 3.8.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin…
CVE-2024-5626Medium6.12024-07-12The Inline Related Posts WordPress plugin before 3.7.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected C…
CVE-2024-31347Medium4.32024-06-09Missing Authorization vulnerability in Data443 Tracking Code Manager.This issue affects Tracking Code Manager: from n/a through 2.1.0.
CVE-2024-31426Medium4.32024-04-15Cross-Site Request Forgery (CSRF) vulnerability in Data443 Inline Related Posts.This issue affects Inline Related Posts: from n/a through 3.3.1.
CVE-2023-6257Medium4.32024-04-11The Inline Related Posts WordPress plugin before 3.6.0 is missing authorization in an AJAX action to ensure that users are allowed to see the content of the po…
CVE-2024-2444Medium4.82024-04-06The Inline Related Posts WordPress plugin before 3.5.0 does not sanitise and escape some of its settings, which could allow high privilege users such as Admin…
CVE-2024-2579Medium5.92024-03-21Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Data443 Tracking Code Manager.This issue affects Tracking…