Skip to content
OpenAdvisories

Vendor

bensibley

3 known vulnerabilities.

Products

Independent Analytics – WordPress Analytics Plugin 2 Unlimited 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-5737

    Independent Analytics <= 2.14.9 - Unauthenticated Server-Side Request Forgery via Tracking Route

    The Independent Analytics plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.14.9. This is due to a public tracking route at /wp-json/iawp/search that accepts attacker-controlled referrer_url values when …

    bensibley Independent Analytics – WordPress Analytics Plugin Web / CMS
  • Medium 6.5
    CVE-2025-31073

    WordPress Unlimited plugin <= 1.45 - Cross Site Scripting (XSS) Vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bensibley Unlimited unlimited allows Stored XSS.This issue affects Unlimited: from n/a through <= 1.45.

    bensibley Unlimited