GCVE - cpe:2.3:a:arni_cinco:wpcargo_track_&_trace:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:arni_cinco:wpcargo_track_&_trace:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Arni Cinco (`083797fc-ad5c-5d89-b006-b2dd7c1b06bd`)
Product	Wpcargo Track & Trace (`7e48d77a-5460-5fc4-bbae-dbdd933eb548`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2026-25401`	vulnerable	2026-06-08 07:53:19.767364	WordPress WPCargo Track & Trace plugin <= 8.0.2 - Broken Access Control vulnerability HIGH (7.5) Missing Authorization vulnerability in Arni Cinco WPCargo Track & Trace wpcargo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPCargo Track & Trace: from n/a through <= 8.0.2. Published: 2026-03-25T16:14:48.355Z Updated: 2026-04-28T16:14:57.849Z Open on db.gcve.eu Reference links https://patchstack.com/database/Wordpress/Plugin/wpcargo/vulnerability/wordpress-wpcargo-track-trace-plugin-8-0-2-broken-access-control-vulnerability?_s_id=cve	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-31609`	vulnerable	2026-06-08 07:18:58.223936	WordPress WPCargo Track & Trace plugin <= 8.0.2 - Insecure Direct Object References (IDOR) vulnerability MEDIUM (4.3) Missing Authorization vulnerability in Arni Cinco WPCargo Track & Trace wpcargo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPCargo Track & Trace: from n/a through <= 8.0.2. Published: 2025-03-31T12:55:38.665Z Updated: 2026-04-28T16:12:10.348Z Open on db.gcve.eu Reference links https://patchstack.com/database/Wordpress/Plugin/wpcargo/vulnerability/wordpress-wpcargo-track-trace-plugin-7-0-6-insecure-direct-object-references-idor-vulnerability?_s_id=cve	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-54271`	vulnerable	2026-06-08 06:54:16.277160	WordPress WPCargo Track & Trace plugin <= 8.0.2 - Settings Change vulnerability MEDIUM (5.4) Missing Authorization vulnerability in Arni Cinco WPCargo Track & Trace wpcargo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPCargo Track & Trace: from n/a through <= 8.0.2. Published: 2024-12-13T14:24:46.788Z Updated: 2026-04-28T16:10:48.497Z Open on db.gcve.eu Reference links https://patchstack.com/database/Wordpress/Plugin/wpcargo/vulnerability/wordpress-wpcargo-track-trace-plugin-7-0-6-settings-change-vulnerability?_s_id=cve	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-44004`	vulnerable	2026-06-08 06:45:53.402041	WordPress WPCargo Track & Trace plugin <= 8.0.2 - SQL Injection vulnerability CRITICAL (9.3) Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Arni Cinco WPCargo Track & Trace wpcargo allows SQL Injection. This issue affects WPCargo Track & Trace: before 8.0.4. Published: 2024-09-17T22:27:30.453Z Updated: 2026-08-18T13:41:27.444Z Open on db.gcve.eu Reference links https://patchstack.com/database/wordpress/plugin/wpcargo/vulnerability/wordpress-wpcargo-track-trace-plugin-7-0-6-sql-injection-vulnerability?_s_id=cve	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.