AnalyticsWP vulnerabilities

2 known vulnerabilities in AnalyticsWP from Solid Plugins. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.3 Critical severity

  AnalyticsWP: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2025-39389May 19, 2025Solid Plugins

  Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Solid Plugins AnalyticsWP allows SQL Injection.This issue affects AnalyticsWP: from n/a through 2.1.2.

• 9.8 Critical severity

  AnalyticsWP: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2024-13321Mar 14, 2025Solid Plugins

  The AnalyticsWP plugin for WordPress is vulnerable to SQL Injection via the 'custom_sql' parameter in all versions up to, and including, 2.0.0 due to insufficient authorization checks on the handle_get_stats() function. This makes it possible for unauthenticat