yuvalo
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Goal Tracker – Custom Event Tracking for GA4 | 1 | – | May 1, 2026 |
| WP Google Analytics Events | 1 | – | Dec 9, 2025 |
Exploited and recent CVEs
- CVE-2024-13362 Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter 0.3%
- CVE-2025-63009 WordPress WP Google Analytics Events plugin <= 2.8.2 - Sensitive Data Exposure vulnerability 0.3%