Vulnerabilidades de Passionatebrains
CVEs publicadas que afetam produtos de Passionatebrains: 5 registro(s), com severidade, exploração e correções.
GA4WP: Google Analytics for WordPress 2Add Expires Headers & Optimized Minify 1GA4WP – Analytics Dashboard for the Website 1AEH Speed Optimization: Browser Cache, Optimized Minify, Lazy Loading & Image Optimization 1AWCA – The Great Analytics Insights for Your eStore 1Advanced WC Analytics 1
CVE-2024-13362
Média · 6.1
CWE-79 01/05/2026
Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter
Multiple plugins and/or themes for WordPress are vulnerable to Reflected Cross-Site Scripting via the url parameter in various versions due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.
CVE-2025-68032
Média · 6.5
CWE-862 20/02/2026
WordPress Advanced WC Analytics plugin <= 3.19.0 - Settings Change vulnerability
Missing Authorization vulnerability in Passionate Brains Advanced WC Analytics advance-wc-analytics allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Advanced WC Analytics: from n/a through <= 3.19.0.
CVE-2025-68028
Média · 6.5
CWE-862 20/02/2026
WordPress GA4WP: Google Analytics for WordPress plugin <= 2.10.0 - Broken Access Control vulnerability
Missing Authorization vulnerability in Passionate Brains GA4WP: Google Analytics for WordPress ga-for-wp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GA4WP: Google Analytics for WordPress: from n/a through <= 2.10.0.
CVE-2026-24633
Média · 5.3
CWE-862 23/01/2026
WordPress Add Expires Headers & Optimized Minify plugin <= 3.2.0 - Broken Access Control vulnerability
Missing Authorization vulnerability in Passionate Brains Add Expires Headers & Optimized Minify add-expires-headers allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Add Expires Headers & Optimized Minify: from n/a through <= 3.2.0.
CVE-2026-22517
Média · 5.4
CWE-862 08/01/2026
WordPress GA4WP: Google Analytics for WordPress plugin <= 2.10.0 - Broken Access Control vulnerability
Missing Authorization vulnerability in Passionate Brains GA4WP: Google Analytics for WordPress ga-for-wp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GA4WP: Google Analytics for WordPress: from n/a through <= 2.10.0.