110 matches found
CVE-2025-52765
Cross-Site Request Forgery CSRF vulnerability in lisensee NetInsight Analytics Implementation Plugin netinsight-analytics-implementation-plugin allows Stored XSS.This issue affects NetInsight Analytics Implementation Plugin: from n/a through = 1.0.3...
CVE-2025-52765
Summary (CVE-2025-52765) : A Cross-Site Request Forgery (CSRF) vulnerability exists in the WordPress NetInsight Analytics Implementation Plugin (versions up to and including 1.0.3) that also enables Stored XSS. The issue affects NetInsight Analytics Implementation Plugin
CVE-2025-52767
CVE-2025-52767 : CSRF vulnerability in NetInsight Analytics Implementation Plugin for WordPress (affected: NetInsight Analytics Implementation Plugin
WordPress NetInsight Analytics Implementation Plugin <= 1.0.3 - Cross Site Request Forgery (CSRF) Vulnerability
Cross Site Request Forgery CSRF Vulnerability discovered by Chu The Anh Blue Rock in WordPress Plugin NetInsight Analytics Implementation Plugin versions = 1.0.3...
PT-2025-33362 · WordPress · Netinsight Analytics Implementation Plugin
Name of the Vulnerable Software and Affected Versions: NetInsight Analytics Implementation Plugin versions through 1.0.3 Description: A Cross-Site Request Forgery CSRF vulnerability exists in NetInsight Analytics Implementation Plugin, which also allows Stored Cross-Site Scripting XSS...
MAL-2025-6808 Malicious code in latam-xp-analytics-plugin-gtm (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 333a48f2dfbcb9ab75608fb120182771732f71543d3bc13c3352b144b3022403 The OpenSSF Package Analysis project identified 'latam-xp-analytics-plugin-gtm' @ 2.0.0 npm as malicious. It is considered malicious because: -...
Malicious code in latam-xp-analytics-plugin-absmartly (npm)
The package communicates with a domain associated with malicious activity...
CVE-2017-20092
A vulnerability classified as problematic was found in Google Analytics Dashboard Plugin 2.1.1. Affected by this vulnerability is an unknown functionality. The manipulation leads to basic cross site scripting. The attack can be launched remotely...
CVE-2024-12561
The Affiliate Sales in Google Analytics and other tools plugin for WordPress is vulnerable to Open Redirect in all versions up to, and including, 2.0.0. This is due to insufficient validation on the redirect url supplied via the 'afflink' parameter. This makes it possible for unauthenticated...
CVE-2025-32239
Missing Authorization vulnerability in Joao Romao Social Share Buttons & Analytics Plugin – GetSocial.io wp-share-buttons-analytics-by-getsocial allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Social Share Buttons & Analytics Plugin – GetSocial.io: from...
CVE-2025-32239
CVE-2025-32239 describes a Missing Authorization vulnerability in the WordPress plugin “Social Share Buttons & Analytics Plugin – GetSocial.io” (wp-share-buttons-analytics-by-getsocial). Affected range is listed as from n/a through 4.5. The CVSS v3.1 score is 4.3 (Medium) with network attack vect...
WordPress ShareThis Dashboard for Google Analytics plugin <= 3.2.3 - Cross Site Request Forgery (CSRF) vulnerability
Cross Site Request Forgery CSRF vulnerability discovered by Rafie Muhammad Patchstack in WordPress Plugin ShareThis Dashboard for Google Analytics versions = 3.2.3...
CVE-2025-32239: Missing Authorization
Missing Authorization vulnerability in Joao Romao Social Share Buttons & Analytics Plugin – GetSocial.io wp-share-buttons-analytics-by-getsocial allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Social Share Buttons & Analytics Plugin – GetSocial.io: from...
PT-2025-15000
Name of the Vulnerable Software and Affected Versions Social Share Buttons & Analytics Plugin – GetSocial.io versions n/a through 4.5 Description The issue is related to a Missing Authorization vulnerability, which allows exploitation of incorrectly configured access control security levels...
CVE-2022-45366
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Jason Crouse, VeronaLabs Slimstat Analytics plugin = 5.0.4 versions...
WordPress CM Custom WordPress Reports and Analytics plugin <= 1.2.0 - Reflected Cross Site Scripting (XSS) vulnerability
Reflected Cross Site Scripting XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin CM Custom WordPress Reports and Analytics versions = 1.2.0...
WordPress plugin Social Analytics 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...
WordPress Show Analytics widget plugin cross-site scripting vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...
CVE-2024-51700
CVE-2024-51700 is a cross-site request forgery to stored cross-site scripting vulnerability affecting NAVER Analytics (versions up to 0.9, has been unpatched per ENISA/EUVD entry). Connected EUVD-2024-45791 notes malicious code in NAVER Analytics (PyPI bioql unrelated to NAVER) but reiterates NAV...
CVE-2024-51700 WordPress NAVER Analytics plugin <= 0.9 - CSRF to Stored XSS vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in eutrue NAVER Analytics naver-analytics allows Stored XSS.This issue affects NAVER Analytics: from n/a through = 0.9...