Yuvalo vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Yuvalo products: 2 record(s), with severity, exploitation and fixes.

Goal Tracker – Custom Event Tracking for GA4 1 WP Google Analytics Events 1

Exploited only (KEV) →

CVE-2024-13362 Medium · 6.1 CWE-79 May 1, 2026

Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter

Multiple plugins and/or themes for WordPress are vulnerable to Reflected Cross-Site Scripting via the url parameter in various versions due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.

CVE-2025-63009 Medium · 5.3 CWE-497 Dec 9, 2025

WordPress WP Google Analytics Events plugin <= 2.8.2 - Sensitive Data Exposure vulnerability

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in yuvalo WP Google Analytics Events wp-google-analytics-events allows Retrieve Embedded Sensitive Data.This issue affects WP Google Analytics Events: from n/a through <= 2.8.2.