PT-2025-50029 · Yuvalo+1 · Wp Google Analytics Events
CVE-2025-63009
·
Published
2025-12-04
·
Updated
2025-12-09
CVSS v3.1
5.3
Medium
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
WP Google Analytics Events versions prior to 2.8.3
Description
The WP Google Analytics Events plugin for WordPress allows unauthenticated attackers to retrieve embedded sensitive data. This issue results in the exposure of sensitive system information, such as user or configuration data, to an unauthorized control sphere.
Recommendations
Update the plugin to a version newer than 2.8.2.
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Wp Google Analytics Events