CVE-2025-10047
Email Tracker
Minimum safe version
5.3.16
Update to 5.3.16 or later to address 10 fixable vulnerabilities
Freemius SDK <= 2.4.2 - Missing Authorization Checks
WordPress Email Tracker Plugin <= 5.3.8 is vulnerable to Cross Site Scripting (XSS)
Email Tracker < 5.2.6 - Reflected Cross-Site Scripting
Email Tracker – Email Tracking Plugin to track Emails for Open and Email Links Click (Compatible with WooCommerce) < 5.2.6 - Reflected Cross-Site Scripting
Freemius SDK <= 2.4.2 - Missing Authorization Checks
WordPress Email Tracker plugin <= 5.2.5 - Reflected Cross-Site Scripting (XSS) vulnerability
WordPress Email Tracker plugin <= 5.3.5 - Sensitive Information Disclosure vulnerability
WordPress Email Tracker plugin <= 5.3.5 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability
CVE-2021-44777