Vulnerabilities / Site Kit by Google
Site Kit by Google vulnerabilities
Advisories WPSec published for Site Kit by Google – Analytics, Search Console, AdSense, Speed. Other sources may list more. Its attack surface: Site Kit by Google on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-02 | WPSEC-2026-0223 | Site Kit by Google <= 1.187.0 - Unauthenticated Authentication Bypass via Sign in with Google | High 7.5 | 1.188.0 |
| 2026-10-02 | WPSEC-2026-0222 | Site Kit by Google <= 1.187.0 - Cross-Site Request Forgery via Sign in with Google Callback | Medium 4.2 | 1.188.0 |
License: CC BY 4.0