WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
google-analytics-dashboard-for-wp
Published
2026-04-22
Title
ExactMetrics < 9.1.3 - Editor+ Arbitrary Plugin Installation/Activation
Slug
google-analytics-dashboard-for-wp
Published
2026-04-23
Title
ExactMetrics < 9.1.3 - Authenticated (Subscriber+) Missing Authorization to Google Ads Access Token Retrieval via AJAX Action 'exactmetrics_ads_get_token'
Slug
google-analytics-for-wordpress
Published
2014-11-26
Title
Google Analytics by Yoast <= 5.1.2 Cross-Site Scripting (XSS)
Slug
google-analytics-for-wordpress
Published
2015-03-06
Title
Google Analytics by Yoast <= 5.3.2 - Cross-Site Scripting (XSS)
Slug
google-analytics-for-wordpress
Published
2015-03-19
Title
Google Analytics by Yoast <= 5.3.2 - Stored Cross-Site Scripting (XSS)
Slug
google-analytics-for-wordpress
Published
2015-04-20
Title
Google Analytics by Yoast < 5.4 - Unauthenticated Cross-Site Scripting (XSS)
Slug
google-analytics-for-wordpress
Published
2015-08-10
Title
Google Analytics by Yoast <= 5.4.4 - Authenticated Stored Cross-Site Scripting (XSS)
Slug
google-analytics-for-wordpress
Published
2018-12-02
Title
Google Analytics by Monster Insights < 7.2.0 - Authenticated Stored Cross-Site Scripting (XSS)
Slug
google-analytics-for-wordpress
Published
2022-12-23
Title
MonsterInsights < 8.9.1 - Stored Cross-Site Scripting via Google Analytics
Slug
google-analytics-for-wordpress
Published
2023-01-13
Title
MonsterInsights < 8.12.1 - Contributor+ Stored XSS
Slug
google-analytics-for-wordpress
Published
2023-05-10
Title
Google Analytics by Monster Insights < 8.14.1 - Contributor+ Stored XSS
Slug
google-analytics-for-wordpress
Published
2024-01-05
Title
Google Analytics by Monster Insights < 8.22.0 - Missing Authorization
Slug
google-analytics-for-wordpress
Published
2026-05-12
Title
MonsterInsights < 10.1.3 - Subscriber+ Sensitive Information Exposure and Plugin Integration Reset
Slug
google-analytics-for-wordpress
Published
2026-07-27
Title
MonsterInsights < 11.1.0 - Unauthenticated Measurement Protocol Secret Update via Empty-Key HMAC Bypass
Slug
google-analytics-mu
Published
2014-08-01
Title
Google Analytics MU 2.3 - google-analytics-mu-network.php Analytics Code Manipulation CSRF
Slug
google-analytics-opt-out
Published
2023-02-14
Title
Opt-Out for Google Analytics < 2.3.5 - Admin+ Stored XSS
Slug
google-analytics-premium
Published
2026-06-11
Title
MonsterInsights Pro 10.2.0/10.2.2 - Backdoored via AWS S3 bucket compromise
Slug
google-analytics-top-posts-widget
Published
2015-04-20
Title
Google Analytics Top Content Widget < 1.5.7 - Reflected XSS
Slug
google-apps-login
Published
2022-12-01
Title
Google Apps Login < 3.4.5 - Admin+ Stored XSS
Slug
google-authenticator
Published
2016-04-28
Title
Google Authenticator <= 0.47 - Two Factor Authentication Bypass
Slug
google-authenticator
Published
2026-08-03
Title
Google Authenticator < 0.56 - 2FA Secret Overwrite via CSRF
Slug
google-calendar-events
Published
2014-10-08
Title
Google Calendar Events < 2.0.4 - XSS
Slug
google-calendar-events
Published
2023-10-18
Title
Google Calendar Events < 3.2.6 - Cross-Site Request Forgery (CSRF)
Slug
google-calendar-events
Published
2023-11-28
Title
Google Calendar Events < 3.2.8 - Contributor+ Stored XSS via shortcode
Slug
google-calendar-events
Published
2023-10-20
Title
Simple Calendar < 3.2.5 - Cross-Site Request Forgery via duplicate_feed