Skip to content
OpenAdvisories

Vendor

stape-io

1 known vulnerabilities.

Products

gtm-server-side-wordpress-plugin 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.7
    CVE-2026-55826

    Customer Order Data Exposed via Unauthenticated gtm_server_side_order_id Cookie Manipulation in GTM Server Side WordPress Plugin

    The GTM Server Side plugin by stape.io implements server-side tracking on WordPress websites. From version 2.0.0 to before version 2.1.48, the WooCommerce purchase event tracking mechanism allows an unauthenticated attacker to trigger the rendering of another…

    stape-io gtm-server-side-wordpress-plugin Web / CMS