Passionate Brains

Products

ProductCVEsExploitedLatest
Add Expires Headers & Optimized Minify2–Jan 23, 2026
GA4WP: Google Analytics for WordPress2–Feb 20, 2026
Advanced WC Analytics1–Feb 20, 2026

Exploited and recent CVEs

  • CVE-2025-68032 Medium 6.5 WordPress Advanced WC Analytics plugin <= 3.19.0 - Settings Change vulnerability 0.3%
  • CVE-2025-68028 Medium 6.5 WordPress GA4WP: Google Analytics for WordPress plugin <= 2.10.0 - Broken Access Control vulnerability 0.3%
  • CVE-2026-24633 Medium 5.3 WordPress Add Expires Headers & Optimized Minify plugin <= 3.2.0 - Broken Access Control vulnerability 0.3%
  • CVE-2026-22517 Medium 5.4 WordPress GA4WP: Google Analytics for WordPress plugin <= 2.10.0 - Broken Access Control vulnerability 0.2%
  • CVE-2023-27457 Medium 4.3 WordPress Add Expires Headers & Optimized Minify Plugin <= 2.7 is vulnerable to Cross Site Request Forgery (CSRF) 0.3%