5 matches found
CVE-2022-3425
The Analyticator WordPress plugin before 6.5.6 unserializes user input provided via the settings, which could allow high-privilege users such as admin to perform PHP Object Injection when a suitable gadget is present...
Design/Logic Flaw
The Analyticator WordPress plugin before 6.5.6 unserializes user input provided via the settings, which could allow high-privilege users such as admin to perform PHP Object Injection when a suitable gadget is present...
Design/Logic Flaw
The Analyticator WordPress plugin before 6.5.6 unserializes user input provided via the settings, which could allow high privilege users such as admin to perform PHP Object Injection when a suitable gadget is present...
PT-2017-6792
Name of the Vulnerable Software and Affected Versions Google Analyticator Wordpress Plugin versions prior to 6.4.9.3 rev @1183563 Description The issue is related to a cross-site request forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing...