Google Analytics by Yoast Premium

Use with caution

Last revised: July 22, 2015

Confidence: Medium
This plugin has been given a short, targeted code review.

Before using this plugin, you should carefully consider these findings. Read more about this recommendation.

Warnings

The version of this plugin that this recommendation was based on is known to be vulnerable to attack:

Stored XSS in Google Analytics by Yoast Premium allows privileged users to attack other users

Findings

Allows privilege escalation by authenticated users

Reason for the 'Use with caution' result

The plugin contains or is likely to contain a vulnerability which could be exploited by a privileged user to affect the site’s confidentiality, integrity or availability in a manner exceeding their privileges:

Allows privilege escalation by authenticated users in some non-default configurations

Failure criteria

Lack of proper output escaping

dxw advisories

Plugin inspection: