9704 matches found
Hardcoded credentials
The google-analyticator plugin before 5.2.1 for WordPress has insufficient HTML sanitization for Google Analytics API text...
CVE-2009-5158
The CVE-2009-5158 entry concerns the WordPress plugin google-analyticator, affected in versions prior to 5.2.1. The underlying issue is insufficient HTML sanitization of Google Analytics API text, which enables a cross-site scripting (XSS) vulnerability. Multiple connected sources (Red Hat, CNVD,...
CVE-2016-10912
The universal-analytics plugin before 1.3.1 for WordPress has XSS...
CVE-2016-10912
The universal-analytics plugin before 1.3.1 for WordPress has XSS...
Cross site scripting
The universal-analytics plugin before 1.3.1 for WordPress has XSS...
CVE-2016-10912
The CVE concerns the WordPress universal-analytics plugin, specifically versions before 1.3.1, which are reported to be vulnerable to cross-site scripting (XSS). The affected component is the universal-analytics plugin for WordPress; the root cause is not spelled out beyond the XSS description in...
CVE-2016-10912
The universal-analytics plugin before 1.3.1 for WordPress has XSS...
CVE-2017-18554
The analytics-tracker plugin before 1.1.1 for WordPress has XSS via a search event...
CVE-2017-18556
The bws-google-analytics plugin before 1.7.1 for WordPress has multiple XSS issues...
CVE-2017-18554
The analytics-tracker plugin before 1.1.1 for WordPress has XSS via a search event...
CVE-2017-18556
The bws-google-analytics plugin before 1.7.1 for WordPress has multiple XSS issues...
Cross site scripting
The bws-google-analytics plugin before 1.7.1 for WordPress has multiple XSS issues...
CVE-2017-18556
The bws-google-analytics plugin before 1.7.1 for WordPress has multiple XSS issues...
CVE-2017-18556
The bws-google-analytics plugin before 1.7.1 for WordPress has multiple XSS issues...
CVE-2017-18556
The CVE pertains to the WordPress plugin bws-google-analytics (pre-1.7.1). The connected Nuclei template confirms multiple XSS flaws in the plugin before 1.7.1, enabling authenticated attackers to inject and execute arbitrary JavaScript in victims’ browsers (potential cookie/credentials leakage a...
CVE-2017-18554
The analytics-tracker plugin before 1.1.1 for WordPress has XSS via a search event...
CVE-2017-18554
The CVE-2017-18554 entry involves the WordPress Analytics Tracker plugin prior to version 1.1.1, which is vulnerable to a cross-site scripting (XSS) flaw triggered via a search event. Affected component: the analytics-tracker plugin for WordPress. Root cause (as stated in connected references): i...
CVE-2017-18554
The analytics-tracker plugin before 1.1.1 for WordPress has XSS via a search event...
WordPress bws-google-analytics plugin cross-site scripting vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. bws-google-analytics is a plugin that uses data from the Google Analytics website analytics or website traffic tracking tool platform ...
