Google Analyticator

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2015-4697 HIGH This Week

Cross-site request forgery (CSRF) vulnerability in Google Analyticator Wordpress Plugin before 6.4.9.3 rev @1183563. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

WordPress Google CSRF Google Analyticator

NVD

CVSS 3.0

8.8

EPSS

0.2%

CVE-2015-6238 MEDIUM POC PATCH This Month

Multiple cross-site scripting (XSS) vulnerabilities in the Google Analyticator plugin before 6.4.9.6 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1). Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. Public exploit code available.

XSS WordPress Google PHP Google Analyticator

NVD

CVSS 2.0

4.3

EPSS

0.3%

CVE-2015-4697

EPSS 0% CVSS 8.8

HIGH This Week

WordPress Google CSRF +1

NVD

CVE-2015-6238

EPSS 0% CVSS 4.3

MEDIUM POC PATCH This Month

XSS WordPress Google +2

NVD