Description
Unauthenticated Cross Site Request Forgery (CSRF) in Tracking Code Manager <= 2.6.0 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Data443 Risk Mitigation | Tracking Code Manager | ≤ 2.6.0 | — |
High · 7.1
CVE-2026-28172
EUVD-2026-53948GHSA-m77r-w43m-5w96
WordPress Tracking Code Manager plugin <= 2.6.0 - CSRF to Stored XSS vulnerability
Published Aug 6, 2026 · Updated Aug 6, 2026 · Assigned by Patchstack