Plugin icon

ExactMetrics – Google Analytics Dashboard for WordPress (Website Stats Plugin)

google-analytics-dashboard-for-wp

Vulnerabilities:

5

Last Updated:

March 31, 2026

Active Installs:

300000

Published
Title
Fixed in
CVSS
Published
2026-03-10
Title
ExactMetrics 8.6.0 - 9.0.2 - Insecure Direct Object Reference to Arbitrary Plugin Installation
Fixed in
Fixed in 9.0.3
CVSS
7.2 (high)
Published
2026-03-10
Title
ExactMetrics 7.1.0 - 9.0.2 - Improper Privilege Management to Role Privilege Escalation via Settings Update
Fixed in
Fixed in 9.0.3
CVSS
7.2 (high)
Published
2025-01-24
Title
ExactMetrics < 8.2.0 - Missing Authorization
Fixed in
Fixed in 8.2.0
CVSS
4.3 (medium)
Published
2023-05-09
Title
ExactMetrics < 7.14.2 - Contributor+ Stored XSS
Fixed in
Fixed in 7.14.2
CVSS
5.9 (medium)
Published
2023-01-13
Title
ExactMetrics < 7.12.1 - Contributor+ Stored XSS
Fixed in
Fixed in 7.12.1
CVSS
6.8 (medium)