WordPress security by component

GA4WP: Google Analytics for WordPress

Plugin description

GA4WP: Google Analytics for WordPress is a WordPress component with 2 published CVE records in this archive. The latest tracked vulnerability was published Feb 20, 2026; the highest CVE/CNA score is 6.5.

Plugin slug: ga-for-wp

Latest vulnerability

CVE-2025-68028: GA4WP: Google Analytics for WordPress: A security weakness

GA4WP: Google Analytics for WordPress is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.

PublishedFeb 20, 2026

Safe version guidanceSee mitigation notes

		Safe version
Feb 20, 2026	CVE-2025-68028 GA4WP: Google Analytics for WordPress: A security weakness GA4WP: Google Analytics for WordPress is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.	See mitigation notes	CVE6.5 NVDPending
Jan 08, 2026	CVE-2026-22517 GA4WP: Google Analytics for WordPress: A security weakness GA4WP: Google Analytics for WordPress is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.	See mitigation notes	CVE5.4 NVDPending