VYPR

Google Analytics Dashboard

by WordPress

CVEs (1)

  • CVE-2026-1993HigMar 11, 2026
    risk 0.50cvss 8.8epss 0.00

    The ExactMetrics – Google Analytics Dashboard for WordPress plugin is vulnerable to Improper Privilege Management in versions 7.1.0 through 9.0.2. This is due to the `update_settings()` function accepting arbitrary plugin setting names without a whitelist of allowed settings.…