plugin

Analytics Counter Vulnerabilities

1 known security issue reported for the Analytics Counter WordPress plugin. Most recent disclosed Dec 11, 2016.

1 critical

Running Analytics Counter on your site? Check whether your installed version is affected.

Google Analytics Counter Tracker <= 3.4.1 - Unauthenticated PHP Object Injection

critical

The Google Analytics Counter Tracker plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 3.4.1 via deserialization of untrusted input from the vulnerable wpadm_ga_request cookie parameter. This allows unauthenticated attackers to inject a PHP Object.

CVSS:: 9.8
Affected:: up to 3.5.0
Fixed in:: 3.5.0
Disclosed:: Dec 11, 2016

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database