sumo google analyticator vulnerabilities

Latest sumo google analyticator CVEs

Newest publication first

1. CVE-2022-4323 Google Analyticator < 6.5.6 - Admin+ PHP Object Injection

   Published 2023-01-23

   High·CVSS 7.2 EPSS 1.1%

   The Analyticator WordPress plugin before 6.5.6 unserializes user input provided via the settings, which could allow high privilege users such as admin to perform PHP Object Injection when a suitable gadget is present

2. CVE-2022-3425 Google Analyticator < 6.5.6 - Admin+ PHP Object Injection

   Published 2023-01-23

   High·CVSS 7.2 EPSS 1.1%

   The Analyticator WordPress plugin before 6.5.6 unserializes user input provided via the settings, which could allow high-privilege users such as admin to perform PHP Object Injection when a suitable gadget is present.

3. CVE-2009-5158 Google Analyticator <= 5.2 - Cross-Site Scripting

   Published 2019-08-22

   Medium·CVSS 6.1 EPSS 0.92%

   The google-analyticator plugin before 5.2.1 for WordPress has insufficient HTML sanitization for Google Analytics API text.

4. CVE-2015-4697 Google Analyticator <= 6.4.9.3 - Cross-Site Request Forgery

   Published 2017-09-07

   High·CVSS 8.8 EPSS 1.2%

   Cross-site request forgery (CSRF) vulnerability in Google Analyticator Wordpress Plugin before 6.4.9.3 rev @1183563.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.