Advisories · Technology

WPCargo Track & Trace.

Every CVE that names WPCargo Track & Trace among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-12713 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

WPCargo Track & Trace < 8.0.4 - Unauthenticated SQL Injection via wpcargo_tracking_number
- WPCargo Track & Trace
- SQL injection
Not analysed yet 6 Aug 2026
CVE-2022-1436 CVE record

WPCargo Track & Trace < 6.9.5 - Reflected Cross Site Scripting
- WPCargo Track & Trace
- Cross-site scripting (XSS)
Not analysed yet 16 May 2022
CVE-2022-1435 CVE record

WPCargo Track & Trace < 6.9.5 - Admin+ Stored Cross Site Scripting
- WPCargo Track & Trace
- Cross-site scripting (XSS)
Not analysed yet 16 May 2022
CVE-2021-25003 CVE record

WPCargo < 6.9.0 - Unauthenticated RCE
- WPCargo Track & Trace
- Code injection
Not analysed yet 14 Mar 2022