ExactMetrics – Google Analytics Dashboard for WordPress (Website Stats Plugin) vulnerabilities

3 known vulnerabilities in ExactMetrics – Google Analytics Dashboard for WordPress (Website Stats Plugin) from Smub. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.2 High severity

  ExactMetrics – Google Analytics Dashboard for…: Missing Authorization

  CVE-2026-5464Apr 23, 2026Smub

  The ExactMetrics – Google Analytics Dashboard for WordPress (Website Stats Plugin) plugin for WordPress is vulnerable to unauthorized arbitrary plugin installation and activation in all versions up to, and including, 9.1.2. This is due to the reports page expo

• 8.8 High severity

  ExactMetrics – Google Analytics Dashboard for…: Improper Privilege Management

  CVE-2026-1993Mar 11, 2026Smub

  The ExactMetrics – Google Analytics Dashboard for WordPress plugin is vulnerable to Improper Privilege Management in versions 7.1.0 through 9.0.2. This is due to the `update_settings()` function accepting arbitrary plugin setting names without a whitelist of a

• 8.8 High severity

  ExactMetrics – Google Analytics Dashboard for…: Authorization Bypass Through User-Controlled Key

  CVE-2026-1992Mar 11, 2026Smub

  The ExactMetrics – Google Analytics Dashboard for WordPress plugin is vulnerable to Insecure Direct Object Reference in versions 8.6.0 through 9.0.2. This is due to the `store_settings()` method in the `ExactMetrics_Onboarding` class accepting a user-supplied