CVE Intelligence

Passionatebrains vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Passionatebrains products: 5 record(s), with severity, exploitation and fixes.

GA4WP: Google Analytics for WordPress 2Add Expires Headers & Optimized Minify 1GA4WP – Analytics Dashboard for the Website 1AEH Speed Optimization: Browser Cache, Optimized Minify, Lazy Loading & Image Optimization 1AWCA – The Great Analytics Insights for Your eStore 1Advanced WC Analytics 1

Exploited only (KEV) →

CVE-2024-13362 Medium · 6.1 CWE-79 May 1, 2026
Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter
Multiple plugins and/or themes for WordPress are vulnerable to Reflected Cross-Site Scripting via the url parameter in various versions due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.
CVE-2025-68032 Medium · 6.5 CWE-862 Feb 20, 2026
WordPress Advanced WC Analytics plugin <= 3.19.0 - Settings Change vulnerability
Missing Authorization vulnerability in Passionate Brains Advanced WC Analytics advance-wc-analytics allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Advanced WC Analytics: from n/a through <= 3.19.0.
CVE-2025-68028 Medium · 6.5 CWE-862 Feb 20, 2026
WordPress GA4WP: Google Analytics for WordPress plugin <= 2.10.0 - Broken Access Control vulnerability
Missing Authorization vulnerability in Passionate Brains GA4WP: Google Analytics for WordPress ga-for-wp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GA4WP: Google Analytics for WordPress: from n/a through <= 2.10.0.
CVE-2026-24633 Medium · 5.3 CWE-862 Jan 23, 2026
WordPress Add Expires Headers & Optimized Minify plugin <= 3.2.0 - Broken Access Control vulnerability
Missing Authorization vulnerability in Passionate Brains Add Expires Headers & Optimized Minify add-expires-headers allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Add Expires Headers & Optimized Minify: from n/a through <= 3.2.0.
CVE-2026-22517 Medium · 5.4 CWE-862 Jan 8, 2026
WordPress GA4WP: Google Analytics for WordPress plugin <= 2.10.0 - Broken Access Control vulnerability
Missing Authorization vulnerability in Passionate Brains GA4WP: Google Analytics for WordPress ga-for-wp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GA4WP: Google Analytics for WordPress: from n/a through <= 2.10.0.