WordPress Stape Conversion Tracking plugin < 2.3.11 - Unauthenticated SSRF and Same-Origin XSS vulnerability

Unauthenticated SSRF and Same-Origin XSS vulnerability discovered by Joep van Antwerpen in WordPress Plugin GTM Server Side versions 2.3.11...