PT-2023-13351 · WordPress · Analyticator

Name of the Vulnerable Software and Affected Versions: The Analyticator WordPress plugin versions prior to 6.5.6 Description: The issue allows high-privilege users, such as admins, to perform PHP Object Injection when a suitable gadget is present. This is due to the plugin unserializing user inpu...

WordPress plugin The Analyticator 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A code issue vulnerability exists in the...

PT-2023-14182 · WordPress · The Analyticator

Name of the Vulnerable Software and Affected Versions: The Analyticator WordPress plugin versions prior to 6.5.6 Description: The issue allows high privilege users, such as admins, to perform PHP Object Injection when a suitable gadget is present. This is due to the plugin unserializing user inpu...

WordPress plugin The Analyticator 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A code issue vulnerability exists in the...

Google Analyticator < 6.5.6 - Admin+ PHP Object Injection

The plugin unserializes user input provided via the settings, which could allow high privilege users such as admin to perform PHP Object Injection when a suitable gadget is present PoC To simulate a gadget chain, put the following code in a plugin: class Evil public function wakeup : void...

Google Analyticator < 6.5.6 - Admin+ PHP Object Injection

The plugin unserializes user input provided via the settings, which could allow high-privilege users such as admin to perform PHP Object Injection when a suitable gadget is present. To simulate a gadget chain, put the following code in the plugin: class Evil public function wakeup : void...

Google Analyticator < 6.5.6 - Admin+ PHP Object Injection

The plugin unserializes user input provided via the settings, which could allow high-privilege users such as admin to perform PHP Object Injection when a suitable gadget is present. PoC To simulate a gadget chain, put the following code in the plugin: class Evil public function wakeup : void...

WordPress google-analyticator plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. google-analyticator is a plugin used in it to display and manage data from the Google Analytics website analytics or website traffic...

CVE-2009-5158

The google-analyticator plugin before 5.2.1 for WordPress has insufficient HTML sanitization for Google Analytics API text...

CVE-2009-5158

The google-analyticator plugin before 5.2.1 for WordPress has insufficient HTML sanitization for Google Analytics API text...

CVE-2009-5158

The CVE-2009-5158 entry concerns the WordPress plugin google-analyticator, affected in versions prior to 5.2.1. The underlying issue is insufficient HTML sanitization of Google Analytics API text, which enables a cross-site scripting (XSS) vulnerability. Multiple connected sources (Red Hat, CNVD,...

WordPress Google Analyticator Plugin < 6.4.9.4 CSRF Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description scriptoid"1.3.6.1.4.1.25623.1.0.112037";...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in Google Analyticator Wordpress Plugin before 6.4.9.3 rev @1183563...

CVE-2015-4697

Cross-site request forgery CSRF vulnerability in Google Analyticator Wordpress Plugin before 6.4.9.3 rev @1183563...

CVE-2015-4697

Cross-site request forgery CSRF vulnerability in Google Analyticator Wordpress Plugin before 6.4.9.3 rev @1183563...

CVE-2015-4697

The CVE-2015-4697 entry maps to a CSRF vulnerability in the WordPress Google Analyticator plugin. Affected product: Google Analyticator WordPress plugin (prior to version 6.4.9.3 revision @1183563 per CVE record; openvas entry also notes vulnerability in versions

WordPress Google Analyticator plugin cross-site scripting vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports personal blog sites set up on PHP and MySQL servers.Google Analyticator is one of the Google Analytics plug-ins. A cross-site scripting vulnerability exists in WordPre...

CVE-2015-6238

Multiple cross-site scripting XSS vulnerabilities in the Google Analyticator plugin before 6.4.9.6 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 gaadsense, 2 gaadmindisableDimentionIndex, 3 gadownloadsprefix, 4 gadownloads, or 5 gaoutboundprefix parameter i...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the Google Analyticator plugin before 6.4.9.6 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 gaadsense, 2 gaadmindisableDimentionIndex, 3 gadownloadsprefix, 4 gadownloads, or 5 gaoutboundprefix parameter i...

CVE-2015-6238

Multiple cross-site scripting XSS vulnerabilities in the Google Analyticator plugin before 6.4.9.6 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 gaadsense, 2 gaadmindisableDimentionIndex, 3 gadownloadsprefix, 4 gadownloads, or 5 gaoutboundprefix parameter i...