WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
google-analytics-for-wordpress
Published
2015-04-20
Title
Google Analytics by Yoast < 5.4 - Unauthenticated Cross-Site Scripting (XSS)
Slug
google-analytics-for-wordpress
Published
2015-08-10
Title
Google Analytics by Yoast <= 5.4.4 - Authenticated Stored Cross-Site Scripting (XSS)
Slug
google-analytics-for-wordpress
Published
2018-12-02
Title
Google Analytics by Monster Insights < 7.2.0 - Authenticated Stored Cross-Site Scripting (XSS)
Slug
google-analytics-for-wordpress
Published
2022-12-23
Title
MonsterInsights < 8.9.1 - Stored Cross-Site Scripting via Google Analytics
Slug
google-analytics-for-wordpress
Published
2023-01-13
Title
MonsterInsights < 8.12.1 - Contributor+ Stored XSS
Slug
google-analytics-for-wordpress
Published
2023-05-10
Title
Google Analytics by Monster Insights < 8.14.1 - Contributor+ Stored XSS
Slug
google-analytics-for-wordpress
Published
2024-01-05
Title
Google Analytics by Monster Insights < 8.22.0 - Missing Authorization
Slug
google-analytics-mu
Published
2014-08-01
Title
Google Analytics MU 2.3 - google-analytics-mu-network.php Analytics Code Manipulation CSRF
Slug
google-analytics-opt-out
Published
2023-02-14
Title
Opt-Out for Google Analytics < 2.3.5 - Admin+ Stored XSS
Slug
google-analytics-top-posts-widget
Published
2015-04-20
Title
Google Analytics Top Content Widget < 1.5.7 - Reflected XSS
Slug
google-apps-login
Published
2022-12-01
Title
Google Apps Login < 3.4.5 - Admin+ Stored XSS
Slug
google-authenticator
Published
2016-04-28
Title
Google Authenticator <= 0.47 - Two Factor Authentication Bypass
Slug
google-calendar-events
Published
2014-10-08
Title
Google Calendar Events < 2.0.4 - XSS
Slug
google-calendar-events
Published
2023-10-18
Title
Google Calendar Events < 3.2.6 - Cross-Site Request Forgery (CSRF)
Slug
google-calendar-events
Published
2023-11-28
Title
Google Calendar Events < 3.2.8 - Contributor+ Stored XSS via shortcode
Slug
google-calendar-events
Published
2023-10-20
Title
Simple Calendar < 3.2.5 - Cross-Site Request Forgery via duplicate_feed
Slug
google-calendar-events
Published
2024-09-24
Title
Simple Calendar – Google Calendar Plugin < 3.4.3 - Reflected Cross-Site Scripting
Slug
google-calendar-events
Published
2025-12-18
Title
Google Calendar Events < 3.6.0 - Unauthenticated Insecure Direct Object Reference
Slug
google-captcha
Published
2015-03-03
Title
Google Captcha <= 1.12 - Authentication Bypass
Slug
google-captcha
Published
2017-04-12
Title
Multiple BestWebSoft Plugins - Authenticated Cross-Site Scripting (XSS)
Slug
google-captcha
Published
2025-01-03
Title
reCaptcha by BestWebSoft < 1.79 - CAPTCHA Bypass
Slug
google-cse
Published
2024-05-31
Title
Google CSE <= 1.0.7 - Admin+ Stored XSS
Slug
google-cse
Published
2024-05-31
Title
Google CSE <= 1.0.7 - Authenticated (Admin+) Stored Cross-Site Scripting
Slug
google-distance-calculator
Published
2025-02-27
Title
MK Google Directions < 3.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
google-docs-rsvp-guestlist
Published
2024-10-21
Title
Google Docs RSVP <= 2.0.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting