Critical · 9.3 CVE-2024-44004 EUVD-2024-40786GHSA-m9wp-vvgp-96h6

WordPress WPCargo Track & Trace plugin <= 8.0.2 - SQL Injection vulnerability

Published Sep 17, 2024 · Updated Aug 18, 2026 · Assigned by Patchstack

Vendor: Arni Cinco Product: WPCargo Track & Trace

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Arni Cinco WPCargo Track & Trace wpcargo allows SQL Injection.

This issue affects WPCargo Track & Trace: before 8.0.4.

Affected products

Vendor	Product	Affected	Fixed
Arni Cinco	WPCargo Track & Trace	< 8.0.4	8.0.4

References

https://patchstack.com/database/wordpress/plugin/wpcargo/vulnerability/wordpress-wpcargo-track-trace-plugin-7-0-6-sql-injection-vulnerability?_s_id=cve vdb-entry