Skip to content
OpenAdvisories

Vendor

Passionate Brains

6 known vulnerabilities.

Products

Add Expires Headers & Optimized Minify 2 GA4WP: Google Analytics for WordPress 2 Advanced WC Analytics 1 AEH Speed Optimization: Browser Cache, Optimized Minify, Lazy Loading & Image Optimization 1
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Medium 6.5
    CVE-2025-68028

    WordPress GA4WP: Google Analytics for WordPress plugin <= 2.10.0 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Passionate Brains GA4WP: Google Analytics for WordPress ga-for-wp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GA4WP: Google Analytics for WordPress: from n/a through <= 2.10…

    Passionate Brains GA4WP: Google Analytics for WordPress Web / CMS
  • Medium 6.5
    CVE-2025-68032

    WordPress Advanced WC Analytics plugin <= 3.19.0 - Settings Change vulnerability

    Missing Authorization vulnerability in Passionate Brains Advanced WC Analytics advance-wc-analytics allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Advanced WC Analytics: from n/a through <= 3.19.0.

    Passionate Brains Advanced WC Analytics
  • Medium 5.3
    CVE-2026-24633

    WordPress Add Expires Headers & Optimized Minify plugin <= 3.2.0 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Passionate Brains Add Expires Headers & Optimized Minify add-expires-headers allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Add Expires Headers & Optimized Minify: from n/a thr…

    Passionate Brains Add Expires Headers & Optimized Minify
  • Medium 5.4
    CVE-2026-22517

    WordPress GA4WP: Google Analytics for WordPress plugin <= 2.10.0 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Passionate Brains GA4WP: Google Analytics for WordPress ga-for-wp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GA4WP: Google Analytics for WordPress: from n/a through <= 2.10…

    Passionate Brains GA4WP: Google Analytics for WordPress Web / CMS
  • Medium 6.3
    CVE-2022-4974

    Freemius SDK <= 2.4.2 - Missing Authorization Checks

    The Freemius SDK, as used by hundreds of WordPress plugin and theme developers, was vulnerable to Cross-Site Request Forgery and Information disclosure due to missing capability checks and nonce protection on the _get_debug_log, _get_db_option, and the _set_d…

    bPlugins Saad Iqbal Premmerce nicheaddons Web / CMS
  • Medium 4.3
    CVE-2023-27457

    WordPress Add Expires Headers & Optimized Minify Plugin <= 2.7 is vulnerable to Cross Site Request Forgery (CSRF)

    Cross-Site Request Forgery (CSRF) vulnerability in Passionate Brains Add Expires Headers & Optimized Minify plugin <= 2.7 versions.

    Passionate Brains Add Expires Headers & Optimized Minify