Wp Google Analytics Events Vulnerabilities

The WP Google Analytics Events – No-Code Custom Event Tracking for Google Analytics plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.8.2. This makes it possible for unauthenticated attackers to extract sensitive user or configuration data.

CVSS:

5.3

Affected:

up to 2.8.2

Fix:

No patched version reported

Disclosed:

Dec 4, 2025

CVE-2025-63009 on NVD →

The WP Google Analytics Events – No-Code Custom Event Tracking for Google Analytics plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in all versions up to, and including, 2.8.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...

CVSS:

6.1

Affected:

up to 2.8.0

Fixed in:

2.8.1

Disclosed:

Apr 12, 2024

CVE-2024-32145 on NVD →