WordPress plugin
17TRACK for WooCommerce security & vulnerabilities
Unpatched vulnerability in the latest version
At least one vulnerability affects the latest version and no fix has been released. Deactivate the plugin or restrict access to the affected feature until the vendor ships a patch.
- Critical0
- High0
- Medium1
- Low0
All 17TRACK for WooCommerce vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium6.1 | Reflected Cross-Site Scripting ≤1.2.10No patch available | CVE-2025-27324 |
- Medium6.1Reflected Cross-Site Scripting
≤1.2.10No patch available
17TRACK for WooCommerce: common questions
Does 17TRACK for WooCommerce have known vulnerabilities?
Yes. VulnCrest Radar lists 1 known vulnerability in 17TRACK for WooCommerce: 1 medium. At least one is not fixed in the latest version.
How do I check which version of 17TRACK for WooCommerce I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent 17TRACK for WooCommerce vulnerability?
CVE-2025-27324, published Feb 21, 2025: 17TRACK for WooCommerce <= 1.2.10 - Reflected Cross-Site Scripting. Severity: Medium (CVSS 6.1).
Is any 17TRACK for WooCommerce vulnerability listed in CISA KEV?
No. None of the known 17TRACK for WooCommerce vulnerabilities is currently listed in the CISA KEV catalog.