Lucene search

K

Dashboard For Google Analytics Security Vulnerabilities

cve
cve

CVE-2024-1809

The Analytify – Google Analytics Dashboard For WordPress (GA4 analytics made easy) plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on AJAX functions in combination with nonce leakage in all versions up to, and including, 5.2.3. This makes it...

5.4CVSS

8.6AI Score

0.0004EPSS

2024-05-02 05:15 PM
26
cve
cve

CVE-2024-1584

The Analytify – Google Analytics Dashboard For WordPress (GA4 analytics made easy) plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'wpa_check_authentication' function in all versions up to, and including, 5.2.1. This makes it...

5.3CVSS

6.5AI Score

0.0005EPSS

2024-05-02 05:15 PM
22
cve
cve

CVE-2022-45851

Missing Authorization vulnerability in ShareThis ShareThis Dashboard for Google Analytics.This issue affects ShareThis Dashboard for Google Analytics: from n/a through...

5.4CVSS

6.8AI Score

0.0004EPSS

2024-03-25 12:15 PM
52
cve
cve

CVE-2023-23999

Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in MonsterInsights plugin <= 8.14.0...

6.5CVSS

5.2AI Score

0.0005EPSS

2023-05-18 11:15 AM
70
cve
cve

CVE-2017-20155

A vulnerability was found in Sterc Google Analytics Dashboard for MODX up to 1.0.5. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file core/components/analyticsdashboardwidget/elements/tpl/widget.analytics.tpl of the component Internal...

6.1CVSS

6AI Score

0.001EPSS

2022-12-30 11:15 PM
27
cve
cve

CVE-2021-24438

The ShareThis Dashboard for Google Analytics WordPress plugin before 2.5.2 does not sanitise or escape the 'ga_action' parameter in the stats view before outputting it back in an attribute when the plugin is connected to a Google Analytics account, leading to a reflected Cross-Site Scripting issue....

6.1CVSS

6AI Score

0.001EPSS

2021-08-30 03:15 PM
25