Stape-io vulnerabilities
We track 1 vulnerability in Stape-io products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on October 23, 2026.
1vulnerabilities
0critical
1high
0exploited
8.7average CVSS score
Latest Stape-io vulnerabilities
- 8.7 High severity
gtm-server-side-wordpress-plugin: Exposure of Sensitive Information to an Unauthorized Actor
The GTM Server Side plugin by stape.io implements server-side tracking on WordPress websites. From version 2.0.0 to before version 2.1.48, the WooCommerce purchase event tracking mechanism allows an unauthenticated attacker to trigger the rendering of another