← WordPress Vulnerabilities
WordPress security by component

AdWords Conversion Tracking Code

AdWords Conversion Tracking Code is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published Dec 31, 2025; the highest published CVSS base score is 6.5.

Plugin slug: adwords-conversion-tracking-code

CVE-2025-62118: AdWords Conversion Tracking Code: Cross-site scripting

AdWords Conversion Tracking Code is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed. The public source does not disclose the vulnerable endpoint, action, parameter or function, so the precise input path remains unknown.

PublishedDec 31, 2025
Safe version guidanceSee mitigation notes
Published vulnerabilities for adwords-conversion-tracking-code
Safe version
Dec 31, 2025 CVE-2025-62118
AdWords Conversion Tracking Code: Cross-site scripting
AdWords Conversion Tracking Code is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed. The public source does not disclose the vulnerable endpoint, action, parameter or function, so the precise input path remains unknown.
See mitigation notes
CVE6.5
NVDPending