Show filters
5 Total Results
Displaying 1-5 of 5
Sort by:
Attacker Value
Unknown
CVE-2022-4323
Disclosure Date: January 23, 2023 (last updated October 08, 2023)
The Analyticator WordPress plugin before 6.5.6 unserializes user input provided via the settings, which could allow high privilege users such as admin to perform PHP Object Injection when a suitable gadget is present
0
Attacker Value
Unknown
CVE-2022-3425
Disclosure Date: January 23, 2023 (last updated October 08, 2023)
The Analyticator WordPress plugin before 6.5.6 unserializes user input provided via the settings, which could allow high-privilege users such as admin to perform PHP Object Injection when a suitable gadget is present.
0
Attacker Value
Unknown
CVE-2009-5158
Disclosure Date: August 22, 2019 (last updated November 27, 2024)
The google-analyticator plugin before 5.2.1 for WordPress has insufficient HTML sanitization for Google Analytics API text.
0
Attacker Value
Unknown
CVE-2015-4697
Disclosure Date: September 07, 2017 (last updated November 26, 2024)
Cross-site request forgery (CSRF) vulnerability in Google Analyticator Wordpress Plugin before 6.4.9.3 rev @1183563.
0
Attacker Value
Unknown
CVE-2015-6238
Disclosure Date: September 21, 2015 (last updated October 05, 2023)
Multiple cross-site scripting (XSS) vulnerabilities in the Google Analyticator plugin before 6.4.9.6 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) ga_adsense, (2) ga_admin_disable_DimentionIndex, (3) ga_downloads_prefix, (4) ga_downloads, or (5) ga_outbound_prefix parameter in the google-analyticator page to wp-admin/admin.php.
0
