Passionate Brains
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Add Expires Headers & Optimized Minify | 2 | – | Jan 23, 2026 |
| GA4WP: Google Analytics for WordPress | 2 | – | Feb 20, 2026 |
| Advanced WC Analytics | 1 | – | Feb 20, 2026 |
Exploited and recent CVEs
- CVE-2025-68032 WordPress Advanced WC Analytics plugin <= 3.19.0 - Settings Change vulnerability 0.3%
- CVE-2025-68028 WordPress GA4WP: Google Analytics for WordPress plugin <= 2.10.0 - Broken Access Control vulnerability 0.3%
- CVE-2026-24633 WordPress Add Expires Headers & Optimized Minify plugin <= 3.2.0 - Broken Access Control vulnerability 0.3%
- CVE-2026-22517 WordPress GA4WP: Google Analytics for WordPress plugin <= 2.10.0 - Broken Access Control vulnerability 0.2%
- CVE-2023-27457 WordPress Add Expires Headers & Optimized Minify Plugin <= 2.7 is vulnerable to Cross Site Request Forgery (CSRF) 0.3%