Extension WordPress
Vulnérabilités Order Tracking – WordPress Status Tracking Plugin
Cette page rassemble les failles publiées pour Order Tracking – WordPress Status Tracking Plugin, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Order Tracking – WordPress Status Tracking Plugin
4 fiches
Order Tracking <= 3.4.4 – Missing Authorization
The Order Tracking plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in versions up to, and including, 3.4.4. This makes it possible for unauthenticated attackers to perform an unauthorized…
*-3.4.4
Non indiqué
31/01/2026
Order Tracking <= 3.3.11 – Missing Authorization via send_test_email()
The Order Tracking plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the send_test_email() function in versions up to, and including, 3.3.11. This makes it possible for authenticated attackers, with…
*-3.3.11
3.3.12b, 3.3.13
16/08/2024
Order Tracking Pro <= 3.3.6 – Reflected Cross-Site Scripting
The Order Tracking Pro plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the start_date and end_date parameters in versions up to, and including, 3.3.6 due to insufficient input sanitization and output escaping. This makes it possible…
*-3.3.6
3.3.7
28/08/2023
Order Tracking Pro <= 3.3.6 – Authenticated (Administrator+) Stored Cross-Site Scripting
The Order Tracking Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the order status parameter in versions up to, and including, 3.3.6 due to insufficient input sanitization and output escaping. This makes it possible for…
*-3.3.6
3.3.7
28/08/2023
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.