Arni Cinco vulnerabilities and threats

6 threats

Severity	CVSS	Signals	Threat	Source	Published
High	7.2		CVE-2026-116864WPCargo Track & Trace (WordPress plugin) · Deserialization of Untrusted Data High7.22026-10-29CVE Database V5CVE-2026-116864 CVE-2026-116864 is a high-severity vulnerability in Arni Cinco's WPCargo Track & Trace software versions up to 8.0.5. It involves PHP Object Injection due to deserialization of untrusted data, which can lead to full compromise of confidentiality, integrity, and availability. The vulnerability requires high privileges to exploit and does not require user interaction. Vulnerability Arni Cinco CWE-502	CVE Database V5	2026-10-29
High	7.5	EPSS 0.3%	CVE-2026-25401WPCargo Track & Trace (WordPress plugin) · Missing Authorization High7.5EPSS 0.3%2026-03-25CVE Database V5CVE-2026-25401 Missing Authorization vulnerability in Arni Cinco WPCargo Track & Trace wpcargo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPCargo Track & Trace: from n/a through <= 8.0.2. EPSS 0.3%Vulnerability Arni Cinco	CVE Database V5	2026-03-25
Medium	6.5	EPSS 0.4%	CVE-2025-31745Subscription Form for Feedblitz (WordPress plugin) · Cross-site Scripting Medium6.5EPSS 0.4%2025-04-01CVE Database V5CVE-2025-31745 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Arni Cinco Subscription Form for Feedblitz feedblitz-email-subscription allows Stored XSS.This issue affects Subscription Form for Feedblitz: from n/a through <= 1.0.9. EPSS 0.4%Vulnerability Arni Cinco	CVE Database V5	2025-04-01
Medium	4.3	EPSS 0.3%	CVE-2025-31609WPCargo Track & Trace (WordPress plugin) · Missing Authorization Medium4.3EPSS 0.3%2025-03-31CVE Database V5CVE-2025-31609 Missing Authorization vulnerability in Arni Cinco WPCargo Track & Trace wpcargo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPCargo Track & Trace: from n/a through <= 8.0.2. EPSS 0.3%Vulnerability Arni Cinco	CVE Database V5	2025-03-31
Medium	5.4	EPSS 0.5%	CVE-2024-54271WPCargo Track & Trace (WordPress plugin) · Missing Authorization Medium5.4EPSS 0.5%2024-12-13CVE Database V5CVE-2024-54271 Missing Authorization vulnerability in Arni Cinco WPCargo Track & Trace wpcargo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPCargo Track & Trace: from n/a through <= 8.0.2. EPSS 0.5%Vulnerability Arni Cinco	CVE Database V5	2024-12-13
Critical	9.3	EPSS 0.5%	CVE-2024-44004WPCargo Track & Trace (WordPress plugin) · SQL Injection Critical9.3EPSS 0.5%2024-09-17CVE Database V5CVE-2024-44004 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Arni Cinco WPCargo Track & Trace wpcargo allows SQL Injection. This issue affects WPCargo Track & Trace: before 8.0.4. EPSS 0.5%Vulnerability Arni Cinco CWE-89	CVE Database V5	2024-09-17

Page 1 of 1