CVE-2024-44004

CRITICAL 9.8CVE-2024-44004 · Published 17/09/2024 · updated 18/08/2026

In short

CVE-2024-44004 is a CRITICAL (CVSS 9.8) vulnerability affecting track & trace (wptaskforce).
Chance of exploitation in the next 30 days (EPSS): 0.46%, higher than 40.1% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
track & trace wptaskforce	`≤ 7.0.6`	No fix yet

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Arni Cinco WPCargo Track & Trace wpcargo allows SQL Injection. This issue affects WPCargo Track & Trace: before 8.0.4.

References

patchstack.com/database/wordpress/plugin/wpcargo/vulnerability/wordpress-wpcargo-track-trace-plugin-7-0-6-sql-injection-vulnerability

More vulnerabilities in track & trace

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free