Tracking Code Manager

Every one of the 6 is a mark on the map. Named now: 1 to 6, most at risk first.

1. Tracking Code Manager < 2.3.0- Admin+ Stored Cross-Site ScriptingCVE-2024-6335Data443 · CVSS 4.8 · 0.4% likely

   CWE-79

2. Tracking Code Manager <= 2.3.0 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2024-8721data443 · CVSS 6.4 · 0.3% likely

   CWE-79

3. WordPress Tracking Code Manager plugin <= 2.0.16 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-2579Data443 · CVSS 5.9 · 0.3% likely

   CWE-79

4. WordPress Tracking Code Manager plugin <= 2.1.0 - Broken Access Control vulnerabilityCVE-2024-31347Data443 · CVSS 4.3 · 0.3% likely

   CWE-862

5. Tracking Code Manager < 2.4.0 - Contributor+ Stored XSSCVE-2024-10309Data443 · CVSS 5.9 · 0.3% likely

   CWE-79

6. Tracking Code Manager <= 2.6.0 - Reflected Cross-Site Scripting via 'TCM_ErrorMessages'CVE-2026-15180data443 · CVSS 6.1 · 0.2% likely

   CWE-79

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.