Threat database

1 threat

Threat database
Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	8.7	EPSS 0.6%	CVE-2026-55826gtm-server-side-wordpress-plugin · Exposure of Sensitive Information to an Unauthorized Actor High8.7EPSS 0.6%2026-10-23CVE Database V5CVE-2026-55826 A vulnerability in the GTM Server Side plugin by stape.io for WordPress allows unauthenticated attackers to access another customer's full order data, including personally identifiable information (PII), via the WooCommerce purchase event tracking mechanism. This affects versions from 2.0.0 up to but not including 2.1.48. The issue has been fixed in version 2.1.48. EPSS 0.6%Vulnerability stape-io #cwe-200	CVE Database V5	2026-10-23

Showing 1–1 of 1 result