Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: sharethis Component: Dashboard For Google Analytics Clear all filters
TI-2025-01296 CVE-2025-1507 · GHSA-h9fj-cm5p-mfqv

ShareThis Dashboard for Google Analytics <= 3.2.1 - Missing Authorization to Unauthenticated Feature Deactivation

Priority LOW 30

The ShareThis Dashboard for Google Analytics plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the handle_actions() function in all versions up to, and including…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00282 Published 2025-03-14 No fix listed CWE-862
TI-2021-06728 CVE-2021-24438 · GHSA-2g38-36pm-wvv2

ShareThis Dashboard for Google Analytics < 2.5.2 - Reflected Cross-Site Scripting (XSS)

Priority LOW 29

The ShareThis Dashboard for Google Analytics WordPress plugin before 2.5.2 does not sanitise or escape the 'ga_action' parameter in the stats view before outputting it back in an attribute when the plugin is connected to…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00827 Published 2021-08-30 Fixed in 2.5.2 CWE-79