10web 10webanalytics vulnerabilities

2 CVEs affecting 10web 10webanalytics, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-47807, published 2025-01-02.

More from 10web.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2020-36756, published 2023-07-12. Medium severity, CVSS 4.3. EPSS: 0.4% chance of exploitation in the next 30 days. The 10WebAnalytics plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.2.8. This is due to missing or incorrect nonce validation on the…
• CVE-2023-47807, published 2025-01-02. Medium severity, CVSS 4.3. EPSS: 0.3% chance of exploitation in the next 30 days. Missing Authorization vulnerability in 10Web 10WebAnalytics wd-google-analytics allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects 10WebAnalytics: from n/a…