Vulnerabilities

TI-2024-19268 CVE-2024-29094 · GHSA-h385-vvhp-wmmp

WordPress HT Easy GA4 plugin <= 1.1.7 - Cross Site Scripting (XSS) vulnerability

LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in HasThemes HT Easy GA4 ( Google Analytics 4 ) allows Stored XSS.This issue affects HT Easy GA4 ( Google Analytics 4 ):…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00398 Published 2024-03-19 No fix listed CWE-79

TI-2023-09602 CVE-2023-23802 · GHSA-j9rr-jp6j-3p55

WordPress HT Easy GA4 ( Google Analytics 4 ) Plugin <= 1.0.6 is vulnerable to Cross Site Request Forgery (CSRF)

LOW 38

Cross-Site Request Forgery (CSRF) vulnerability in HasThemes HT Easy GA4 ( Google Analytics 4 ) plugin <= 1.0.6 versions.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00273 Published 2023-06-15 No fix listed CWE-352

Vulnerabilities

Filters

WordPress HT Easy GA4 plugin <= 1.1.7 - Cross Site Scripting (XSS) vulnerability

WordPress HT Easy GA4 ( Google Analytics 4 ) Plugin <= 1.0.6 is vulnerable to Cross Site Request Forgery (CSRF)