Stape Conversion Tracking vulnerabilities
We track 1 vulnerability in Stape Conversion Tracking products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on November 4, 2026.
1vulnerabilities
0critical
1high
0exploited
7.1average CVSS score
Latest Stape Conversion Tracking vulnerabilities
- 7.1 High severity
Stape Conversion Tracking: Server-Side Request Forgery
The Stape Conversion Tracking WordPress plugin before 2.3.11 does not validate the sub-path appended to its same-origin proxy's upstream endpoint, allowing unauthenticated visitors to redirect the server-side request to an arbitrary host and have the response