CVE-2024-10309

MEDIUM 5.9CVE-2024-10309 · Published 30/01/2025 · updated 17/06/2026

In short

CVE-2024-10309 is a MEDIUM (CVSS 5.9) vulnerability affecting tracking code manager (data443).
Chance of exploitation in the next 30 days (EPSS): 0.26%, higher than 18.1% of all vulnerabilities.
Fix: update to 2.4.0 or later.

Package	Affected versions	Patched versions
tracking code manager data443	`< 2.4.0`	`2.4.0`

Description

The Tracking Code Manager WordPress plugin before 2.4.0 does not sanitise and escape some of its metabox settings when outputing them in the page, which could allow users with a role as low as Contributor to perform Cross-Site Scripting attacks.

References

wpscan.com/vulnerability/9eb21250-34bd-4600-a0a5-7c5117f69f04 · Exploit

More vulnerabilities in tracking code manager

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free