ExactMetrics – Google Analytics Dashboard for WordPress (Website Stats Plugin)

Explore ExactMetrics – Google Analytics Dashboard for WordPress (Website Stats Plugin) vulnerabilities across all versions. Currently tracking 7 known vulnerabilities, including severity, impact, and patch status.

Strategic Overview

Avg CVSSMedium

6.7/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all ExactMetrics – Google Analytics Dashboard for WordPress (Website Stats Plugin) vulnerabilities before they are exploited.

Vulnerability Records

7 records


2026-04-23 14:48	ExactMetrics <= 9.1.2 - Authenticated (Subscriber+) Missing Authorization to Google Ads Access Token Retrieval via AJAX Action 'exactmetrics_ads_get_token' ExactMetrics <= 9.1.2	`CVE-2026-5488`	5.3 Medium	Dmitrii Ignatyev	Yes
2026-04-22 19:44	ExactMetrics <= 9.1.2 - Authenticated (Editor+) Arbitrary Plugin Installation/Activation via exactmetrics_connect_process ExactMetrics <= 9.1.2	`CVE-2026-5464`	7.2 High	Nguyen Ngoc Duc (duc193)	Yes
2026-03-10 21:02	ExactMetrics 7.1.0 - 9.0.2 - Authenticated (Custom) Improper Privilege Management to Role Privilege Escalation via Settings Update ExactMetrics 7.1.0 – 9.0.2	`CVE-2026-1993`	8.8 High	Ali Sünbül	Yes
2026-03-10 21:00	ExactMetrics 8.6.0 - 9.0.2 - Authenticated (Custom) Insecure Direct Object Reference to Arbitrary Plugin Installation ExactMetrics 8.0.0 – 9.0.2	`CVE-2026-1992`	8.8 High	Ali Sünbül	Yes
2025-01-24 00:00	ExactMetrics <= 8.1.0 - Missing Authorization ExactMetrics <= 8.1.0	`CVE-2025-24750`	4.3 Medium	Rafie Muhammad	Yes
2023-05-09 00:00	ExactMetrics <= 7.14.1 - Authenticated (Contributor+) Stored Cross-Site Scripting ExactMetrics <= 7.14.1	`CVE-2023-23880`	6.4 Medium	Rafie Muhammad	Yes
2023-01-13 00:00	ExactMetrics <= 7.12.0 - Authenticated (Contributor+) Cross-Site Scripting ExactMetrics <= 7.12.0	`CVE-2023-0082`	6.4 Medium	István Márton	Yes

Showing 1–7 of 7 reports