Search Analytics for WP

Search Analytics for WP has 6 disclosed vulnerabilities in the WordSec catalog, reported between 2023 and 2026; all 6 are fixed as of September 2026. Their average CVSS score is 5.7, and the most serious one scores 8.1 out of 10. Severity breakdown: 0 critical and 1 high. 2026 was the busiest year with 2 disclosures.

The most common weakness is Cross-Site Scripting, behind 3 of the records (50%). Other recurring categories include Missing Authorization, Cross-Site Request Forgery (CSRF).

Every one of the 6 issues recorded for Search Analytics for WP has a vendor fix available, so running the current release closes all known holes.

6 independent researchers contributed these findings, one record each. Search Analytics for WP is installed on roughly 3,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.

Strategic Overview

Avg CVSSMedium

5.7/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Search Analytics for WP vulnerabilities before they are exploited.

Highest severity on recordCVSS 8.1CVE-2026-7444

Search Analytics for WP <= 1.4.16 - Cross-Site Request Forgery

Read the full analysis

Vulnerability Records

6 records


2026-08-04 17:56	Search Analytics for WP <= 1.4.16 - Cross-Site Request Forgery Search Analytics for WP <= 1.4.16	`CVE-2026-7444`	8.1 High	nudien udin	Yes
2026-05-25 00:00	Search Analytics for WP < 1.5.0 - Missing Authorization Search Analytics for WP < 1.5.0	`CVE-2026-27357`	5.3 Medium	Legion Hunter	Yes
2024-09-30 19:40	WP Search Analytics <= 1.4.10 - Reflected Cross-Site Scripting Search Analytics for WP <= 1.4.10	`CVE-2024-9209`	6.1 Medium	vgo0	Yes
2024-08-09 00:00	WP Search Analytics <= 1.4.9 - Missing Authorization Search Analytics for WP <= 1.4.9	`CVE-2024-43229`	4.3 Medium	Abdi Pranata	Yes
2023-08-28 00:00	WP Search Analytics <= 1.4.7 - Reflected Cross-Site Scripting via 'render_stats_page' Search Analytics for WP <= 1.4.7	`CVE-2023-30471`	6.1 Medium	LEE SE HYOUNG	Yes
2023-04-28 00:00	WP Search Analytics <= 1.4.5 - Authenticated (Administrator+) Stored Cross-Site Scripting Search Analytics for WP <= 1.4.5	`CVE-2022-47587`	4.4 Medium	Justiice	Yes

Showing 1–6 of 6 reports

Latestv1.5.0

Search Analytics for WP

Author

Cornel Raiu

5.0(30)

100/100

Last Updated

2026-08-26 (17d ago)

Active Installs

3,000+

Downloads

45,765

Requires WP

4.4.0+

Requires PHP

5.6+

Tested up to

WP 7.1

Created

2018-03-02 (9y ago)

Search Analytics for WP will keep history of the search terms used by your users and group them in a set of statistics including the number of posts resulted from that search term. It can easily aid you in finding what your users are really searching for on your website and make sure you provide exactly what they need. Help and/or ideas are greatly appreciated! You can contribute to the GitHub repository: Search Analytics for WP NOTE: Search Analytics for WP stores all the statistics in your WordPress database. No info is sent to third-party services! Features Record all the search queries made using the standard WordPress search form. Exclude searches made by users with certain user roles or with certain IP addresses Exclude duplicate searches made in certain conditions Choose which user roles are allowed to see the statistics Filter statistics by time periods, with/without results, strings/substrings View each term individual statistics Export data in the current view to CSV Easily delete certain search terms from history Easily erase all history from the database in case a reset is needed Easily erase history older than in case a general cleanup is needed Dashboard widget for a quick glance over your last week’s search stats Multisite compatible Country Geolocation Display search statistics on the front of your website using shortcodes

View on WordPress.org