Etoilewebdesign Order Tracking — known CVE vulnerabilities

Every CVE whose affected-product data names Etoilewebdesign Order Tracking, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2023-4471 — CVSS 6.1 (medium): The Order Tracking Pro plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the start_date and end_date parameters in…
• CVE-2023-4500 — CVSS 4.7 (medium): The Order Tracking Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the order status parameter in versions up to…
• CVE-2024-43343 — CVSS 4.3 (medium): Missing Authorization vulnerability in Etoile Web Design Order Tracking allows Accessing Functionality Not Properly Constrained by…