Advisories · Technology

Arni Cinco WPCargo Track & Trace.

Every CVE that names Arni Cinco WPCargo Track & Trace among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-116864 CVE record

CVSS 7.2 High

WordPress WPCargo Track & Trace plugin <= 8.0.5 - PHP Object Injection vulnerability
- Arni Cinco WPCargo Track & Trace
- Insecure deserialization
Not analysed yet 29 Oct 2026
CVE-2026-25401 CVE record

CVSS 7.5 High

WordPress WPCargo Track & Trace plugin <= 8.0.2 - Broken Access Control vulnerability
- Arni Cinco WPCargo Track & Trace
- Broken access control
Not analysed yet 25 Mar 2026
CVE-2025-31609 CVE record

CVSS 4.3 Medium

WordPress WPCargo Track & Trace plugin <= 8.0.2 - Insecure Direct Object References (IDOR) vulnerability
- Arni Cinco WPCargo Track & Trace
- Broken access control
Not analysed yet 31 Mar 2025
CVE-2024-54271 CVE record

CVSS 5.4 Medium

WordPress WPCargo Track & Trace plugin <= 8.0.2 - Settings Change vulnerability
- Arni Cinco WPCargo Track & Trace
- Broken access control
Not analysed yet 13 Dec 2024
CVE-2024-44004 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

WordPress WPCargo Track & Trace plugin <= 8.0.2 - SQL Injection vulnerability
- Arni Cinco WPCargo Track & Trace
- SQL injection
Not analysed yet 17 Sept 2024