Extension WordPress
Vulnérabilités ShareThis Dashboard for Google Analytics
Cette page rassemble les failles publiées pour ShareThis Dashboard for Google Analytics, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de ShareThis Dashboard for Google Analytics
5 fiches
ShareThis Dashboard for Google Analytics <= 3.2.4 – Unauthenticated Google Analytics Data Exposure
The ShareThis Dashboard for Google Analytics plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.2.4. This is due to the Google Analytics client_ID and client_secret being stored in plaintext in…
*-3.2.4
Non indiqué
06/01/2026
ShareThis Dashboard for Google Analytics <= 3.2.3 – Cross-Site Request Forgery
The ShareThis Dashboard for Google Analytics plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.2.3. This is due to missing or incorrect nonce validation on a function. This makes it…
*-3.2.3
3.2.4
04/04/2025
ShareThis Dashboard for Google Analytics <= 3.2.1 – Missing Authorization to Unauthenticated Feature Deactivation
The ShareThis Dashboard for Google Analytics plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the handle_actions() function in all versions up to, and including, 3.2.1. This makes it possible…
*-3.2.1
3.2.2
13/03/2025
ShareThis Dashboard for Google Analytics <= 3.1.4 – Missing Authorization
The ShareThis Dashboard plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on one of its functions in versions up to, and including, 3.1.4. This makes it possible for authenticated attackers, with subscriber-level…
*-3.1.4
3.1.5
23/11/2022
ShareThis Dashboard for Google Analytics <= 2.5.1 – Reflected Cross-Site Scripting via ga_action parameter
The ShareThis Dashboard for Google Analytics WordPress plugin before 2.5.2 does not sanitise or escape the 'ga_action' parameter in the stats view before outputting it back in an attribute when the plugin is connected to a Google Analytics…
[*, 2.5.2)
2.5.2
02/08/2021
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.