Vulnerabilities > Sumo > Google Analyticator > 2.23

DATE CVE VULNERABILITY TITLE RISK
2023-01-23 CVE-2022-3425 Unspecified vulnerability in Sumo Google Analyticator
The Analyticator WordPress plugin before 6.5.6 unserializes user input provided via the settings, which could allow high-privilege users such as admin to perform PHP Object Injection when a suitable gadget is present.
network
low complexity
sumo
7.2
2023-01-23 CVE-2022-4323 Unspecified vulnerability in Sumo Google Analyticator
The Analyticator WordPress plugin before 6.5.6 unserializes user input provided via the settings, which could allow high privilege users such as admin to perform PHP Object Injection when a suitable gadget is present
network
low complexity
sumo
7.2
2019-08-22 CVE-2009-5158 Improper Input Validation vulnerability in Sumo Google Analyticator
The google-analyticator plugin before 5.2.1 for WordPress has insufficient HTML sanitization for Google Analytics API text.
network
sumo CWE-20
4.3
2017-09-07 CVE-2015-4697 Cross-Site Request Forgery (CSRF) vulnerability in Sumo Google Analyticator
Cross-site request forgery (CSRF) vulnerability in Google Analyticator Wordpress Plugin before 6.4.9.3 rev @1183563.
network
sumo CWE-352
6.8