Advisories · Technology

data443 Tracking Code Manager.

Every CVE that names data443 Tracking Code Manager among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-15180 CVE record

CVSS 6.1 Medium

Tracking Code Manager <= 2.6.0 - Reflected Cross-Site Scripting via 'TCM_ErrorMessages'
- data443 Tracking Code Manager
- Cross-site scripting (XSS)
Not analysed yet 15 Oct 2026
CVE-2024-8721 CVE record

CVSS 6.4 Medium

Tracking Code Manager <= 2.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
- data443 Tracking Code Manager
- Cross-site scripting (XSS)
Not analysed yet 24 Dec 2024
CVE-2024-31347 CVE record

CVSS 4.3 Medium

WordPress Tracking Code Manager plugin <= 2.1.0 - Broken Access Control vulnerability
- Data443 Tracking Code Manager
- Broken access control
Not analysed yet 9 Jun 2024
CVE-2024-2579 CVE record

CVSS 5.9 Medium

WordPress Tracking Code Manager plugin <= 2.0.16 - Cross Site Scripting (XSS) vulnerability
- Data443 Tracking Code Manager
- Cross-site scripting (XSS)
Not analysed yet 21 Mar 2024