CVE Catalog
CVE-2026-28172
HighCVSS 7.1Exploitation Probability (EPSS)
Low risk0.10%
1th percentile - higher than 1% of all known CVEs
Summary
Unauthenticated Cross Site Request Forgery (CSRF) in Tracking Code Manager versions up to and including 2.6.0.
Risk Assessment
An attacker can force an authenticated user to perform unwanted actions, potentially leading to unauthorized configuration changes.
Recommendation
Update the Tracking Code Manager plugin to the latest version that includes the security fix.
Other vulnerabilities in Tracking Code Manager
Original NVD description (English source)
Unauthenticated Cross Site Request Forgery (CSRF) in Tracking Code Manager <= 2.6.0 versions.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS