Skip to content
OpenAdvisories

Product · bensibley

Independent Analytics – WordPress Analytics Plugin

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2026-5737

    Independent Analytics <= 2.14.9 - Unauthenticated Server-Side Request Forgery via Tracking Route

    The Independent Analytics plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.14.9. This is due to a public tracking route at /wp-json/iawp/search that accepts attacker-controlled referrer_url values when …

    bensibley Independent Analytics – WordPress Analytics Plugin Web / CMS