Skip to content
OpenAdvisories
Medium · 5.9 CVE-2025-57935 EUVD-2025-30695GHSA-8vxc-5mv9-c4j9

WordPress Bot Block – Stop Spam Referrals in Google Analytics Plugin <= 2.6 - Cross Site Scripting (XSS) Vulnerability

Published Sep 22, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ricky Dawn Bot Block – Stop Spam Referrals in Google Analytics bot-block-stop-spam-google-analytics-referrals allows Stored XSS.This issue affects Bot Block – Stop Spam Referrals in Google Analytics: from n/a through <= 2.6.

Affected products

VendorProductAffectedFixed
Ricky Dawn Bot Block – Stop Spam Referrals in Google Analytics ≤ 2.6 —

References