WordPress plugin
Trakoo – Orders Tracking for WooCommerce security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 3 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High0
- Medium2
- Low1
All Trakoo – Orders Tracking for WooCommerce vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium6.5 | Unauthenticated Arbitrary Shortcode Execution ≤1.2.10Update to 1.2.11 | CVE-2024-4039 | |
| Low2.7 | Authenticated (Administrator+) Directory Traversal via 'file_url' ≤1.2.5Update to 1.2.6 | CVE-2023-4216 | |
| Medium6.1 | Reflected Cross-Site Scripting ≤1.0.14Update to 1.1.10 | CVE-2021-25062 |
- Medium6.5Unauthenticated Arbitrary Shortcode Execution
≤1.2.10Update to 1.2.11
- Low2.7Authenticated (Administrator+) Directory Traversal via 'file_url'
≤1.2.5Update to 1.2.6
- Medium6.1Reflected Cross-Site Scripting
≤1.0.14Update to 1.1.10
Trakoo – Orders Tracking for WooCommerce: common questions
Does Trakoo – Orders Tracking for WooCommerce have known vulnerabilities?
Yes. VulnCrest Radar lists 3 known vulnerabilities in Trakoo – Orders Tracking for WooCommerce: 2 medium, 1 low. None are known to affect version null.
How do I check which version of Trakoo – Orders Tracking for WooCommerce I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Trakoo – Orders Tracking for WooCommerce vulnerability?
CVE-2024-4039, published May 9, 2024: Orders Tracking for WooCommerce <= 1.2.10 - Unauthenticated Arbitrary Shortcode Execution. Severity: Medium (CVSS 6.5).
Is any Trakoo – Orders Tracking for WooCommerce vulnerability listed in CISA KEV?
No. None of the known Trakoo – Orders Tracking for WooCommerce vulnerabilities is currently listed in the CISA KEV catalog.