Skip to content
OpenAdvisories

Product · bensibley

Independent Analytics – WordPress Analytics Plugin

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.2
    CVE-2026-17506

    Independent Analytics <= 2.15.0 - Unauthenticated Stored Cross-Site Scripting

    The Independent Analytics plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 404 not_found_url tracking parameter in versions up to, and including, 2.15.0. This is due to the get_cell_content() function applying urldecode() after esc_ur…

    bensibley Independent Analytics – WordPress Analytics Plugin Web / CMS