Skip to content
OpenAdvisories

Product · Rustaurius

Order Tracking – WordPress Status Tracking Plugin

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.1
    CVE-2023-4471

    Order Tracking Pro <= 3.3.6 - Reflected Cross-Site Scripting

    The Order Tracking Pro plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the start_date and end_date parameters in versions up to, and including, 3.3.6 due to insufficient input sanitization and output escaping. This makes it possible f…

    Rustaurius Order Tracking – WordPress Status Tracking Plugin Web / CMS
  • Medium 4.7
    CVE-2023-4500

    Order Tracking Pro <= 3.3.6 - Authenticated (Administrator+) Stored Cross-Site Scripting

    The Order Tracking Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the order status parameter in versions up to, and including, 3.3.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticate…

    Rustaurius Order Tracking – WordPress Status Tracking Plugin Web / CMS