GA Universal

GA Universal has one disclosed vulnerability in the WordSec catalog, all reported in 2013; it is fixed as of September 2026. Their average CVSS score is 8.8, and the most serious one scores 8.8 out of 10. Severity breakdown: 0 critical and 1 high.

The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (100%).

The one issue recorded for GA Universal has a vendor fix available, so running the current release closes it.

GA Universal is installed on roughly 10 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 3.5.2.

Strategic Overview

Avg CVSSHigh

8.8/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all GA Universal vulnerabilities before they are exploited.

Highest severity on recordCVSS 8.8

GA Universal < 1.0.1 - Cross-Site Request Forgery

Read the full analysis

Vulnerability Records

1 records


2013-04-10 00:00	GA Universal < 1.0.1 - Cross-Site Request Forgery GA Universal < 1.0.1	`N/A`	8.8 High	Anonymous	Yes

Showing 1–1 of 1 reports

Plugin Profile

Latestv1.0.1

GA Universal

Author

ethoseo

0.0(0)

0/100

Last Updated

2013-04-09 (14y ago)

Active Installs

10+

Downloads

2,253

Requires WP

3.0.1+

Requires PHP

Tested up to

WP 3.5.2

Created

2013-04-04 (14y ago)

GA Universal is the first WordPress plugin to implement Analytics.js. It’s highly customizable and allows for tracking across an unlimited number of properties. Tracking can be disabled for user roles and be configured to do any number of things built into Analytics.js Analytics.js is the latest version of Google Analytics’ tracking script. It’s been created as part of Universal Analytics which allows for better tracking of customers across all platforms. It allows for more customization and easier tracking. Analytics.js is the evolution of ga.js and it’s ready to help you and your customers. IMPORTANT: If you use only ga.js, this will not work. You must be using Analytics.js for this plugin to do you any good. If you require additional help with your Google Analytics, get in contact with the plugin developer Ethoseo.

View on WordPress.org