WordPress Plugin Vulnerabilities

Google Analytics Dashboard 2.0.4 - gad-admin-pages-posts.php pid Parameter SQL Injection

Description

The google-analytics-dashboard WordPress plugin was affected by a gad-admin-pages-posts.php pid Parameter SQL Injection security vulnerability.

Affects Plugins

Plugin icon
google-analytics-dashboard
Fixed in 2.0.5

Classification

Type
SQLI
OWASP top 10
A1: Injection
CWE
CWE-89

Miscellaneous

Verified
No
WPVDB ID
4fe639ac-8bd5-49f2-8e20-03e6c0188879

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2015-05-15 (about 10 years ago)

Other

Published
Title
Published
2026-01-27
Title
Crete Core <= 1.4.3 - Unauthenticated SQL Injection
Published
2026-01-05
Title
Form Vibes – Database Manager for Forms < 1.5 - Authenticated (Admin+) SQL Injection
Published
2022-01-24
Title
Popup Builder < 4.0.7 - Admin+ SQL Injection
Published
2023-10-03
Title
MStore API < 4.0.7 - Subscriber+ SQLi
Published
2026-04-21
Title
WPGraphQL < 2.11.1 - Unauthenticated SQL Injection