CVE-2026-57858

CVE-2026-57858 affects Cal.com Cal.diy (versions 2.1.1–6.2.0). The stored XSS arises in BookingPageTagManager through an unsanitized analytics tracking ID, allowing an authenticated event owner to inject JavaScript that can run in visitors’ browsers. Reported impact includes potential session coo...

CVE-2024-1584

The Analytify – Google Analytics Dashboard For WordPress GA4 analytics made easy plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'wpacheckauthentication' function in all versions up to, and including, 5.2.1. This makes it possible f...

CVE-2024-1584

CVE-2024-1584 affects Analytify – Google Analytics Dashboard For WordPress (GA4 analytics made easy). The issue is a missing capability check in wpa_check_authentication across all versions up to 5.2.1, enabling unauthorized modification of the site’s Google Analytics tracking ID by unauthenticat...