Track, Analyze & Optimize by WP Tao
Track, Analyze & Optimize by WP Tao has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it is fixed as of September 2026. Their average CVSS score is 6.1, and the most serious one scores 6.1 out of 10.
The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).
The one issue recorded for Track, Analyze & Optimize by WP Tao has a vendor fix available, so running the current release closes it.
All of these findings were reported by Ryan Novotny. Track, Analyze & Optimize by WP Tao is installed on roughly 600 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.8.8.
CVE-2025-48145Track, Analyze & Optimize by WP Tao <= 1.3 - Reflected Cross-Site Scripting
Read the full analysisVulnerability Records
Track, Analyze & Optimize by WP Tao
Author
Michal Jaworski
The #1 must-have WordPress Plugin for Online Entrepreneurs! WP Tao is a simple but powerful WordPress tracking plugin. It allows identifying website visitors and keeping track of their activities. With this information, you can better align your website to visitors and increase conversion. WP Tao helps to generate sales leads WP Tao captures your visitors emails every time they send a contact form, leave a commet, register, log in, make an order etc. Collected data help you then to identify valuable customers and generate more sales leads. Ready to work in a few clicks No additional resources or external services needed. Just install and activate the plugin and start gathering data! Innovative WP Tao has an innovative Dashboard which immediately provides you with clean and simple reports containing key information. Integrated with most popular ecommerce solutions WP Tao is integrated with most popular ecommerce plugins like: WooCommerce Easy Digital Downloads You can track such actions as: add to cart, remove from cart, place an order and payment events. This feature gives you ability to monitor abandoned carts and take appropriate action (e.g. send an email to a potential customer offering a discount). You can also easily identify the most valuable customer or check the average sales value. Free WP Tao is 100% free. Just download it now and start analyzing your customers’ behavior to optimize your website and generate more sales leads. Features innovative dashboard, where you have access to espresso reports, intuitive timeline for viewing recorded events, tracking a user from the first visit using fingerprinting technology (works even with cookies turned off in the browser), tracking events like: page view, search, login, register, contact, comment, add to cart, remove from cart, order and payment, developer friendly – you can easily add your own events (e.g. when you want to integrate with a custom ecommerce solution). Our goal is to provide the best WordPress tracking software for small entrepreneurs. Saying “best” we mean intuitive, free, ecommerce oriented and developer friendly. Translations English – default, always included Polish Turkish by cihat74 French by equallia
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C