gtm-server-side-wordpress-plugin vulnerabilities

CVEs whose affected-version data names the gtm-server-side-wordpress-plugin package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-55826High· 8.7

today

Customer Order Data Exposed via Unauthenticated gtm_server_side_order_id Cookie Manipulation in GTM Server Side WordPress Plugin

The GTM Server Side plugin by stape.io implements server-side tracking on WordPress websites. From version 2.0.0 to before version 2.1.48, the WooCommerce purchase event tracking mechanism allows an unauthenticated attacker to trigger th…

▾ Twilightstape-io · gtm-server-side-wordpress-pluginvia CVEORG