https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T23:51:35.411541+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-331354 EUVD-2026-331354 2026-10-09T23:51:35.413724+00:00 EUVD-2026-331354 https://cve.radiocsirt.org/vuln/fkie_cve-2026-8944 fkie_cve-2026-8944 2026-10-09T23:51:35.413755+00:00

The Plugin for Google Analytics by IO technologies plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.1. This is due to missing or incorrect nonce validation on the Google Analytics settings page (ga.php). This makes it possible for unauthenticated attackers to update the plugin's stored Google Analytics tracking ID option (io-ga-id) via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.

 https://cve.radiocsirt.org/vuln/ghsa-vgcx-fg83-9q2r GHSA-vgcx-fg83-9q2r 2026-10-09T23:51:35.413789+00:00

The Plugin for Google Analytics by IO technologies plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.1. This is due to missing or incorrect nonce validation on the Google Analytics settings page (ga.php). This makes it possible for unauthenticated attackers to update the plugin's stored Google Analytics tracking ID option (io-ga-id) via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.