Read the docs

Solid Plugins

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Solid Plugins records in CISA KEV

No Solid Plugins vulnerabilities are listed in CISA KEV.

Records

4 records

TI-2025-26131 CVE-2025-39389 · GHSA-rhhq-38wr-94j3

WordPress AnalyticsWP <= 2.1.2 - SQL Injection Vulnerability

Priority MEDIUM 46

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Solid Plugins AnalyticsWP allows SQL Injection.This issue affects AnalyticsWP: from n/a through 2.1.2.

CVSS 3.1CRITICAL 9.3 Network No auth No interaction EPSS 0.00358 Published 2025-05-19 No fix listed CWE-89
TI-2025-26136 CVE-2025-39394 · GHSA-2r7h-jv72-f7xp

WordPress AnalyticsWP plugin <= 2.1.2 - Sensitive Data Exposure vulnerability

Priority LOW 30

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Solid Plugins AnalyticsWP allows Retrieve Embedded Sensitive Data.This issue affects AnalyticsWP: from n/a through 2.1.2.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00308 Published 2025-05-19 No fix listed CWE-497
TI-2025-26130 CVE-2025-39388 · GHSA-cr74-88qf-5463

WordPress AnalyticsWP plugin <= 2.0.0 - Broken Access Control vulnerability

Priority LOW 30

Missing Authorization vulnerability in Solid Plugins AnalyticsWP allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects AnalyticsWP: from n/a through 2.0.0.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00274 Published 2025-05-19 No fix listed CWE-862
Open these records in search →