Conversios – Google Analytics 4 (GA4), Meta Pixel & more Via Google Tag Manager For WooCommerce

Wordfence Intelligence   >   Vulnerability Database   >   WordPress Plugins   >   Conversios – Google Analytics 4 (GA4), Meta Pixel & more Via Google Tag Manager For WooCommerce

Information

Software Type Plugin
Software Slug enhanced-e-commerce-for-woocommerce-store (view on wordpress.org)
Software Status Active
Software Author tatvic
Software Website www.conversios.io
Software Downloads 2,390,172
Software Active Installs 20,000
Software Record Last Updated April 27, 2024

7 Vulnerabilities

Conversios.io <= 6.9.1 - Reflected Cross-Site Scripting
6.1
CVE-2024-29794
Mar 25, 2024
Researcher: Le Ngoc Anh
Conversios <= 7.0.7 - Authenticated (Subscriber+) SQL Injection via ee_syncProductCategory
8.8
CVE-2024-0786
Feb 27, 2024
Researcher: Maksim Kosenko
Conversios – Google Analytics 4 (GA4), Meta Pixel & more Via Google Tag Manager For WooCommerce <= 7.0.7 - Authenticated (Subscriber+) SQL Injection
8.8
CVE-2024-1203
Feb 27, 2024
Researcher: Krzysztof Zając
Conversios.io <= 6.5.0 - Missing Authorization
5.3
CVE-2023-51357
Dec 26, 2023
Researcher: Mika
Conversios.io <= 6.5.3 - Reflected Cross-Site Scripting
6.1
CVE-2023-46094
Oct 17, 2023
Researcher: Phd
All-in-one Google Analytics, Pixels and Product Feed Manager for WooCommerce <= 5.2.3 - Cross-Site Request Forgery
4.3
CVE-2022-46797
Feb 6, 2023
Researcher: Muhammad Daffa
Conversios.io - Google Analytics and Google Shopping plugin for WooCommerce <= 4.6.1 Authenticated SQL Injection
8.8
CVE-2021-24952
Feb 1, 2022
Researcher: ZhongFu Su
Title CVE ID CVSS Researchers Date
Conversios.io <= 6.9.1 - Reflected Cross-Site Scripting CVE-2024-29794 6.1 Le Ngoc Anh March 25, 2024
Conversios <= 7.0.7 - Authenticated (Subscriber+) SQL Injection via ee_syncProductCategory CVE-2024-0786 8.8 Maksim Kosenko February 27, 2024
Conversios – Google Analytics 4 (GA4), Meta Pixel & more Via Google Tag Manager For WooCommerce <= 7.0.7 - Authenticated (Subscriber+) SQL Injection CVE-2024-1203 8.8 Krzysztof Zając February 27, 2024
Conversios.io <= 6.5.0 - Missing Authorization CVE-2023-51357 5.3 Mika December 26, 2023
Conversios.io <= 6.5.3 - Reflected Cross-Site Scripting CVE-2023-46094 6.1 Phd October 17, 2023
All-in-one Google Analytics, Pixels and Product Feed Manager for WooCommerce <= 5.2.3 - Cross-Site Request Forgery CVE-2022-46797 4.3 Muhammad Daffa February 6, 2023
Conversios.io - Google Analytics and Google Shopping plugin for WooCommerce <= 4.6.1 Authenticated SQL Injection CVE-2021-24952 8.8 ZhongFu Su February 1, 2022

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation