CVE-2026-28172 — WordPress Tracking Code Manager plugin <= 2.6.0 - CSRF to Stored XSS vulnerability

CVE-2026-28172

WordPress Tracking Code Manager plugin <= 2.6.0 - CSRF to Stored XSS vulnerability PUBLISHED

Description (CNA)

Unauthenticated Cross Site Request Forgery (CSRF) in Tracking Code Manager <= 2.6.0 versions.

Vendor / product	Versions
Data443 Risk Mitigation, Inc. / Tracking Code Manager	affected n/a through 2.6.0

CWE-352

CISA-ADP

No English description supplied.

No references supplied.