Unknown Order Tracking vulnerabilities

• rustaurius order tracking Order Tracking < 3.6.0 - Unauthenticated Payment Confirmation Forgery via PayPal IPN Listener CVE-2026-121633 5.3 MediumNovember 6, 2026
• addify abandoned cart recovery, advanced free gifts, checkout fields manager +10 more +12 more Multiple Plugins from Addify - Multiple CSRF CVE-2022-4888 6.5 MediumJuly 31, 2023