Google Analytics Opt-Out

Google Analytics Opt-Out has one disclosed vulnerability in the WordSec catalog, all reported in 2023; it is fixed as of September 2026. Their average CVSS score is 4.4, and the most serious one scores 4.4 out of 10.

The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).

The one issue recorded for Google Analytics Opt-Out has a vendor fix available, so running the current release closes it.

All of these findings were reported by Rio Darmawan. Google Analytics Opt-Out is installed on roughly 5,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.2.11.

Strategic Overview

Avg CVSSMedium

4.4/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Google Analytics Opt-Out vulnerabilities before they are exploited.

Highest severity on recordCVSS 4.4CVE-2023-25712

Google Analytics Opt-Out <= 2.3.4 - Authenticated (Admin+) Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

1 records


2023-02-14 00:00	Google Analytics Opt-Out <= 2.3.4 - Authenticated (Admin+) Stored Cross-Site Scripting Google Analytics Opt-Out <= 2.3.4	`CVE-2023-25712`	4.4 Medium	Rio Darmawan	Yes

Showing 1–1 of 1 reports

Latestv2.3.6

Google Analytics Opt-Out

Author

wp-buddy

4.5(16)

90/100

Last Updated

2023-06-30 (3y ago)

Active Installs

5,000+

Downloads

222,172

Requires WP

4.8.0+

Requires PHP

5.6.0+

Tested up to

WP 6.2.11

Created

2013-11-11 (13y ago)

This plugin provides opt-out functionality for Google Analytics by setting a cookie that prevents analytics.js or gtag.js from collecting data. The new GDPR rules require an opt-out. Works perfectly with the [Google Analytics by MonsterInsights Plugin] (https://wordpress.org/plugins/google-analytics-for-wordpress/ “Google Analytics by MonsterInsights Plugin”). However, the plugin is not required to configure the opt-out feature. Just enter your UA or GA code manually. And that’s it! The free and pro versions have now been merged. So now you can also activate a banner! Have fun with it!

View on WordPress.org