plugin

Universal Analytics Vulnerabilities

3 known security issues reported for the Universal Analytics WordPress plugin. Most recent disclosed Aug 21, 2019.

1 medium

Running Universal Analytics on your site? Check whether your installed version is affected.

Scan your site free

Universal Analytics [universal-analytics] < 1.3.1

unknown

[en] The universal-analytics plugin before 1.3.1 for WordPress has XSS.

Affected:
up to 1.3.1
Fixed in:
1.3.1
Disclosed:
Aug 21, 2019

CVE-2016-10912 on NVD →

Universal Analytics <= 1.3.0 - Cross-Site Scripting

medium

The Universal Analytics plugin for WordPress is vulnerable to Cross-Site Scripting in versions up to, and including, 1.3.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers to inject arbitrary web scripts that execute in a victim's browser.

CVSS:
6.4
Affected:
up to 1.3.0
Fixed in:
1.3.1
Disclosed:
Feb 4, 2016

CVE-2016-10912 on NVD →

Universal Analytics [universal-analytics] < 1.3.1

unknown

Because of this vulnerability, the attackers can inject arbitrary web script or HTML. Update the plugin.

Affected:
up to 1.3.1
Fixed in:
1.3.1
Disclosed:
Feb 4, 2016

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database