EG
Product
ExactMetrics – Google Analytics Dashboard for WordPress (Website Stats Plugin)
4
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 3Medium 1Low 0
Watch
Add ExactMetrics – Google Analytics Dashboard for WordPress (Website Stats Plugin) to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-1992 | 8.8 | Mar 11 | ExactMetrics 8.6.0 - 9.0.2 - Authenticated (Custom) Insecure Direct Object Reference to Arbitrary Plugin Installation Affected: 8.0.0 through 9.0.2 |
| CVE-2026-1993 | 8.8 | Mar 11 | ExactMetrics 7.1.0 - 9.0.2 - Authenticated (Custom) Improper Privilege Management to Role Privilege Escalation via Settings Update Affected: 7.1.0 through 9.0.2 |
| CVE-2026-5464 | 7.2 | Apr 23 | ExactMetrics <= 9.1.2 - Authenticated (Editor+) Arbitrary Plugin Installation/Activation via exactmetrics_connect_process Affected: through 9.1.2 |
| CVE-2026-5488 | 5.3 | Apr 24 | ExactMetrics <= 9.1.2 - Authenticated (Subscriber+) Missing Authorization to Google Ads Access Token Retrieval via AJAX Action 'exactmetrics_ads_get_token' Affected: through 9.1.2 |
Showing 4