Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
1 selected

2 records

Release: Analyticator 6.5.6 Clear all filters
TI-2022-03959 CVE-2022-4323 · GHSA-wfcf-c7x5-2q5g

Google Analyticator < 6.5.6 - Admin+ PHP Object Injection

Priority HIGH 67

The Analyticator WordPress plugin before 6.5.6 unserializes user input provided via the settings, which could allow high privilege users such as admin to perform PHP Object Injection when a suitable gadget is present

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01057 Published 2023-01-23 Fixed in 6.5.6
TI-2022-03163 CVE-2022-3425 · GHSA-345r-2rqp-m78h

Google Analyticator < 6.5.6 - Admin+ PHP Object Injection

Priority HIGH 67

The Analyticator WordPress plugin before 6.5.6 unserializes user input provided via the settings, which could allow high-privilege users such as admin to perform PHP Object Injection when a suitable gadget is present.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01057 Published 2023-01-23 Fixed in 6.5.6