Vulnerabilities (CVE)

Filtered by vendor Tracktheclick Subscribe
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-5041 1 Tracktheclick 1 Track The Click 2024-02-28 N/A 8.8 HIGH
The Track The Click WordPress plugin before 0.3.12 does not properly sanitize query parameters to the stats REST endpoint before using them in a database query, allowing a logged in user with an author role or higher to perform time based blind SQLi attacks on the database.