Vulnerabilities / HT Easy GA4 ( Google Analytics 4 )
HT Easy GA4 ( Google Analytics 4 ) vulnerabilities
Advisories WPSec published for HT Easy GA4 – Google Analytics WordPress Plugin. Other sources may list more. Its attack surface: HT Easy GA4 ( Google Analytics 4 ) on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-01 | WPSEC-2026-0130 | HT Easy GA4 ( Google Analytics 4 ) <= 1.9.4 - Missing Authorization to Unauthenticated Secret Key Update and Cache Deletion | Medium 6.5 | 1.9.5 |
| 2026-10-01 | WPSEC-2026-0129 | HT Easy GA4 ( Google Analytics 4 ) <= 1.9.4 - Cross-Site Request Forgery to Google Account Connection and Logout | Medium 5.4 | 1.9.5 |
| 2026-10-01 | WPSEC-2026-0128 | HT Easy GA4 ( Google Analytics 4 ) <= 1.9.4 - Unauthenticated Insecure Direct Object Reference to Order Data Exposure via 'order' Parameter | Medium 5.3 | 1.9.5 |
License: CC BY 4.0