Advisories · Technology

stape-io gtm-server-side-wordpress-plugin.

Every CVE that names stape-io gtm-server-side-wordpress-plugin among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-55826 CVE record

CVSS 8.7 High

Customer Order Data Exposed via Unauthenticated gtm_server_side_order_id Cookie Manipulation in GTM Server Side WordPress Plugin
- stape-io gtm-server-side-wordpress-plugin
- Information disclosure
Not analysed yet 23 Oct 2026