CVE-2026-28172

Unauthenticated Cross Site Request Forgery CSRF in Tracking Code Manager = 2.6.0 versions...

CVE-2026-28172 WordPress Tracking Code Manager plugin <= 2.6.0 - CSRF to Stored XSS vulnerability

Unauthenticated Cross Site Request Forgery CSRF in Tracking Code Manager = 2.6.0 versions...

CVE-2026-28172

The CVE-2026-28172 entry concerns the WordPress Tracking Code Manager plugin versions up to 2.6.0, with an unauthenticated CSRF vulnerability. CVE records also describe this as CSRF that can lead to stored XSS (as noted in CVE-List entry). Affected component: Tracking Code Manager plugin; vulnera...

EUVD-2026-53948

Unauthenticated Cross Site Request Forgery CSRF in Tracking Code Manager = 2.6.0 versions...

CVE-2026-28172 WordPress Tracking Code Manager plugin <= 2.6.0 - CSRF to Stored XSS vulnerability

Unauthenticated Cross Site Request Forgery CSRF in Tracking Code Manager = 2.6.0 versions...

CVE-2026-28172: Cross-Site Request Forgery (CSRF)

Unauthenticated Cross Site Request Forgery CSRF in Tracking Code Manager = 2.6.0 versions...

WordPress Tracking Code Manager plugin <= 2.6.0 - CSRF to Stored XSS vulnerability

CSRF to Stored XSS vulnerability discovered by timomangcut in WordPress Plugin Tracking Code Manager versions = 2.6.0...

Siteimprove Analytics - Moderately critical - Cross-site Scripting - SA-CONTRIB-2026-073

The module doesn't sufficiently sanitize the Siteimprove Analytics identification code when inserting the JavaScript tracking code; this could be exploited to achieve Cross-Site Scripting XSS. This vulnerability is mitigated by the fact that an attacker must have a role with the permission...

CGA-Q6MM-Q7J4-JQVX

Bulletin has no description...

CVE-2025-62118 WordPress AdWords Conversion Tracking Code plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in kcseopro AdWords Conversion Tracking Code adwords-conversion-tracking-code allows Stored XSS.This issue affects AdWords Conversion Tracking Code: from n/a through = 1.0...

EUVD-2025-205970

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in kcseopro AdWords Conversion Tracking Code allows Stored XSS.This issue affects AdWords Conversion Tracking Code: from n/a through 1.0...

WordPress AdWords Conversion Tracking Code plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Muhammad Yudha - DJ in WordPress Plugin AdWords Conversion Tracking Code versions = 1.0...

WordPress plugin AdWords Conversion Tracking Code 跨站脚本漏洞

WordPress and WordPress plugin are products of the WordPress Foundation, a blogging platform developed in the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plug-in. A cross-site scripting vulnerability exis...

CVE-2025-62118: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in kcseopro AdWords Conversion Tracking Code adwords-conversion-tracking-code allows Stored XSS.This issue affects AdWords Conversion Tracking Code: from n/a through = 1.0...

EUVD-2015-4385

Malware in sbrugna...

EUVD-2024-27528

Malicious code in bioql PyPI...

EUVD-2024-29243

Malicious code in bioql PyPI...

EUVD-2025-26540

Malicious code in bioql PyPI...

CVE-2025-58630

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in rbaer Simple Matomo Tracking Code simple-matomo-tracking-code allows Stored XSS.This issue affects Simple Matomo Tracking Code: from n/a through = 1.1.0...

CVE-2025-58630 WordPress Simple Matomo Tracking Code Plugin <= 1.1.0 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in rbaer Simple Matomo Tracking Code simple-matomo-tracking-code allows Stored XSS.This issue affects Simple Matomo Tracking Code: from n/a through = 1.1.0...