CVE-2025-68028

CVE-2025-68028 is a confirmed missing authorization/broken access control issue in the WordPress plugin GA4WP – Analytics Dashboard for the Website (ga-for-wp) up to version 2.10.0 . The Red Hat and CVE records, plus NVD entries, describe a vulnerability allowing exploitation due to misconfigured...

CVE-2026-22517 WordPress GA4WP: Google Analytics for WordPress plugin <= 2.10.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in Passionate Brains GA4WP: Google Analytics for WordPress ga-for-wp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GA4WP: Google Analytics for WordPress: from n/a through = 2.10.0...

WordPress GA4WP: Google Analytics for WordPress plugin < 1.3 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress GA4WP: Google Analytics for WordPress plugin versions 1.3. Solution Update the WordPress GA4WP: Google Analytics for WordPress plugin to the latest available version at least 1.3...

WordPress GA4WP: Google Analytics for WordPress plugin < 1.3 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress GA4WP: Google Analytics for WordPress plugin versions 1.3. Solution Update the WordPress GA4WP: Google Analytics for WordPress plugin to the latest available version at least 1.3...