Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

ExactMetrics – Google Analytics Dashboard for WordPress (Website Stats Plugin) — Vulnerabilities & Security Advisories 4

All 4 CVE vulnerabilities found in ExactMetrics – Google Analytics Dashboard for WordPress (Website Stats Plugin), with AI-generated Chinese analysis, references, and POCs.

Vendor: smub

CVE IDTitleCVSSSeverityPublished
CVE-2026-5488 ExactMetrics <= 9.1.2 - Authenticated (Subscriber+) Missing Authorization to Google Ads Access Token Retrieval via AJAX Action 'exactmetrics_ads_get_token' CWE-862 5.3 Medium2026-04-24
CVE-2026-5464 ExactMetrics <= 9.1.2 - Authenticated (Editor+) Arbitrary Plugin Installation/Activation via exactmetrics_connect_process CWE-862 7.2 High2026-04-23
CVE-2026-1992 ExactMetrics 8.6.0 - 9.0.2 - Authenticated (Custom) Insecure Direct Object Reference to Arbitrary Plugin Installation CWE-639 8.8 High2026-03-11
CVE-2026-1993 ExactMetrics 7.1.0 - 9.0.2 - Authenticated (Custom) Improper Privilege Management to Role Privilege Escalation via Settings Update CWE-269 8.8 High2026-03-11

All 4 known CVE vulnerabilities affecting ExactMetrics – Google Analytics Dashboard for WordPress (Website Stats Plugin) with full Chinese analysis, references, and POCs where available.