CVE-2021-24778: Wpaffiliatefeed Tradetracker-Store

High severity, CVSS 7.2. EPSS: 1.3% chance of exploitation in the next 30 days.

The test parameter of the xmlfeed in the Tradetracker-Store WordPress plugin before 4.6.60 is not sanitised, escaped or validated before inserting to a SQL statement, leading to SQL injection.

Affected products

• Wpaffiliatefeed Tradetracker-Store: before 4.6.60 (fixed in 4.6.60)

Published 2022-03-07. Last modified 2026-06-17.