[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fg6nz0BTuu9IKoBMCoY2KvLpTsUc8ELtQse4cv2BhcgM":3},{"id":4,"url_slug":5,"title":6,"description":7,"plugin_slug":8,"theme_slug":9,"affected_versions":10,"patched_in_version":11,"severity":12,"cvss_score":13,"cvss_vector":14,"vuln_type":15,"published_date":16,"updated_date":17,"references":18,"days_to_patch":20,"patch_diff_files":21,"patch_trac_url":9,"research_status":30,"research_verified":31,"research_rounds_completed":32,"research_plan":33,"research_summary":9,"research_vulnerable_code":9,"research_fix_diff":9,"research_exploit_outline":9,"research_model_used":34,"research_started_at":35,"research_completed_at":36,"research_error":9,"poc_status":9,"poc_video_id":9,"poc_summary":9,"poc_steps":9,"poc_tested_at":9,"poc_wp_version":9,"poc_php_version":9,"poc_playwright_script":9,"poc_exploit_code":9,"poc_has_trace":31,"poc_model_used":9,"poc_verification_depth":9,"poc_exploit_code_gated":31,"source_links":37},"CVE-2026-57351","handl-utm-grabber-tracker-unauthenticated-stored-cross-site-scripting","HandL UTM Grabber \u002F Tracker \u003C= 2.9.2 - Unauthenticated Stored Cross-Site Scripting","The HandL UTM Grabber \u002F Tracker plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 2.9.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.","handl-utm-grabber",null,"\u003C=2.9.2","2.9.3","high",7.2,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:C\u002FC:L\u002FI:L\u002FA:N","Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')","2026-07-01 00:00:00","2026-07-07 19:46:17",[19],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002Ff324b272-1e2f-4951-a8ae-5210a8d4dcbd?source=api-prod",7,[22,23,24,25,26,27,28,29],"client\u002Fbuild\u002Findex-rtl.css","client\u002Fbuild\u002Findex.asset.php","client\u002Fbuild\u002Findex.css","client\u002Fbuild\u002Findex.js","external\u002Fninja.php","handl-utm-grabber.php","includes\u002Fadmin\u002Fpromos.php","includes\u002Fadmin\u002Freact-admin.php","researched",false,3,"# Research Plan: CVE-2026-57351 - HandL UTM Grabber \u002F Tracker Stored XSS\n\n## 1. Vulnerability Summary\nThe **HandL UTM Grabber \u002F Tracker** plugin (up to 2.9.2) is vulnerable to **Unauthenticated Stored Cross-Site Scripting (XSS)**. The vulnerability exists because the plugin captures user-controlled input from HTTP headers (like `X-Forwarded-For`) and URL parameters, stores them in browser cookies without sufficient validation, and subsequently processes these values unsafely. Specifically, while some shortcodes use `esc_html()`, other integration points—such as the **Ninja Forms Merge Tags**—use `urldecode()` on raw cookie data without escaping, and the **Admin Analytics** dashboard (rendered via React) likely displays tracked UTM data without proper output encoding.\n\n## 2. Attack Vector Analysis\n- **Endpoint**: Any frontend page of the WordPress site.\n- **Hook**: `init` (via the `CaptureUTMs` function).\n- **Vulnerable Parameters**: \n    - `utm_source`, `utm_medium`, `utm_term`, `utm_content`, `utm_campaign`, `gclid` (via URL parameters or `Cookie` header).\n    - `handl_ip` (via `X-Forwarded-For` HTTP header).\n    - `handl_url` \u002F `handl_landing_page` (via the Request URI).\n- **Authentication**: None (","gemini-3-flash-preview","2026-07-25 11:52:23","2026-07-25 11:53:53",{"type":38,"vulnerable_version":39,"fixed_version":11,"vulnerable_browse":40,"vulnerable_zip":41,"fixed_browse":42,"fixed_zip":43,"all_tags":44},"plugin","2.9.2","https:\u002F\u002Fplugins.trac.wordpress.org\u002Fbrowser\u002Fhandl-utm-grabber\u002Ftags\u002F2.9.2","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fhandl-utm-grabber.2.9.2.zip","https:\u002F\u002Fplugins.trac.wordpress.org\u002Fbrowser\u002Fhandl-utm-grabber\u002Ftags\u002F2.9.3","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fhandl-utm-grabber.2.9.3.zip","https:\u002F\u002Fplugins.trac.wordpress.org\u002Fbrowser\u002Fhandl-utm-grabber\u002Ftags"]