WPScan
How it worksPricing
Vulnerabilities
WordPressPluginsThemesStatsSubmit vulnerabilities
For developers
StatusAPI detailsCLI scanner
Contact

WordPress Plugin Vulnerabilities

Google Analytics by Yoast <= 5.4.4 - Authenticated Stored Cross-Site Scripting (XSS)

Description

The Google Analytics Dashboard Plugin for WordPress by MonsterInsights WordPress plugin was affected by an Authenticated Stored Cross-Site Scripting (XSS) security vulnerability.

Affects Plugins

google-analytics-for-wordpress
Fixed in version 5.4.5

References

URL
https://advisories.dxw.com/advisories/xss-in-google-analytics-by-yoast-premium-by-privileged-users/

Classification

Type

XSS

OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79

Miscellaneous

Submitter

ethicalhack3r

Submitter twitter
ethicalhack3r
Verified

No

WPVDB ID
59b6f830-9b8c-44a8-8c02-0f3583b032d3

Timeline

Publicly Published

2015-08-10 (about 8 years ago)

Added

2015-08-10 (about 8 years ago)

Last Updated

2019-10-22 (about 3 years ago)

Our Other Services

WPScan WordPress Security Plugin