Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: Solid Plugins Clear all filters
TI-2025-26131 CVE-2025-39389 · GHSA-rhhq-38wr-94j3

WordPress AnalyticsWP <= 2.1.2 - SQL Injection Vulnerability

Priority MEDIUM 46

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Solid Plugins AnalyticsWP allows SQL Injection.This issue affects AnalyticsWP: from n/a through 2.1.2.

CVSS 3.1CRITICAL 9.3 Network No auth No interaction EPSS 0.00358 Published 2025-05-19 No fix listed CWE-89
TI-2025-26136 CVE-2025-39394 · GHSA-2r7h-jv72-f7xp

WordPress AnalyticsWP plugin <= 2.1.2 - Sensitive Data Exposure vulnerability

Priority LOW 30

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Solid Plugins AnalyticsWP allows Retrieve Embedded Sensitive Data.This issue affects AnalyticsWP: from n/a through 2.1.2.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00308 Published 2025-05-19 No fix listed CWE-497
TI-2025-26130 CVE-2025-39388 · GHSA-cr74-88qf-5463

WordPress AnalyticsWP plugin <= 2.0.0 - Broken Access Control vulnerability

Priority LOW 30

Missing Authorization vulnerability in Solid Plugins AnalyticsWP allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects AnalyticsWP: from n/a through 2.0.0.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00274 Published 2025-05-19 No fix listed CWE-862