Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4

Export CSV
CVE-2015-4697

Cross-site request forgery (CSRF) vulnerability in Google Analyticator Wordpress Plugin before 6.4.9.3 rev @1183563.

CVSS 3.0 · 8.8 High EPSS 1.2% KEV · Not listed
Vendors
Sumo
Products
Google Analyticator
CVE-2022-3425

Google Analyticator < 6.5.6 - Admin+ PHP Object Injection

The Analyticator WordPress plugin before 6.5.6 unserializes user input provided via the settings, which could allow high-privilege users such as admin to perform PHP Object Injection when a suitable gadget is present.

CVSS 3.1 · 7.2 High EPSS 1.1% KEV · Not listed
Vendors
Sumo
Products
Google Analyticator
CVE-2022-4323

Google Analyticator < 6.5.6 - Admin+ PHP Object Injection

The Analyticator WordPress plugin before 6.5.6 unserializes user input provided via the settings, which could allow high privilege users such as admin to perform PHP Object Injection when a suitable gadget is present

CVSS 3.1 · 7.2 High EPSS 1.1% KEV · Not listed
Vendors
Sumo
Products
Google Analyticator
CVE-2009-5158

The google-analyticator plugin before 5.2.1 for WordPress has insufficient HTML sanitization for Google Analytics API text.

CVSS 3.0 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Sumo
Products
Google Analyticator