VYPR

gtm-server-side-wordpress-plugin

by Stape.io

CVEs (1)

  • CVE-2026-55826HigOct 23, 2026
    risk 0.50cvss —epss —

    The GTM Server Side plugin by stape.io implements server-side tracking on WordPress websites. From version 2.0.0 to before version 2.1.48, the WooCommerce purchase event tracking mechanism allows an unauthenticated attacker to trigger the rendering of another customer's full…