CVE-2015-10101 Details
Description
A vulnerability classified as problematic was found in Google Analytics Top Content Widget Plugin up to 1.5.6 on WordPress. Affected by this vulnerability is an unknown functionality of the file class-tgm-plugin-activation.php. The manipulation leads to cross site scripting. The attack can be launched remotely. Upgrading to version 1.5.7 is able to address this issue. The identifier of the patch is 25bb1dea113716200a6f0f3135801d84a7a65540. It is recommended to upgrade the affected component. The identifier VDB-226117 was assigned to this vulnerability.
A cross-site scripting vulnerability has been identified in the Google Analytics Top Content Widget Plugin for WordPress, affecting versions prior to 1.5.6. The issue arises from an unknown functionality in the file class-tgm-plugin-activation.php, allowing remote attackers to inject malicious scripts.
Users are advised to upgrade to Google Analytics Top Content Widget Plugin version 1.5.7, which addresses this vulnerability.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Jan 2, 2024References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/wp-plugins/google-analytics-top-posts-widget/commit/25bb1dea113716200a6f0f3135801d84a7a65540 | CVE | Patch |
| https://vuldb.com/?ctiid.226117 | CVE | Permissions RequiredThird Party Advisory |
| https://vuldb.com/?id.226117 | CVE | Permissions RequiredThird Party Advisory |
| https://github.com/wp-plugins/google-analytics-top-posts-widget/commit/25bb1dea113716200a6f0f3135801d84a7a65540 | [email protected] | Patch |
| https://vuldb.com/?ctiid.226117 | [email protected] | Permissions RequiredThird Party Advisory |
| https://vuldb.com/?id.226117 | [email protected] | Permissions RequiredThird Party Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| google analytics top content widget project google analytics top content widget | < 1.5.7 |
CPE
Remediation
| |
Change History
12 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Jun 17, 2026 | CVE Modified | [email protected] |
| Nov 21, 2024 | CVE Modified | CVE |
| May 17, 2024 | CVE Modified | [email protected] |
| May 14, 2024 | CVE Modified | [email protected] |
| Apr 11, 2024 | CVE Modified | [email protected] |
| Mar 21, 2024 | CVE Modified | [email protected] |
| Feb 29, 2024 | CVE Modified | [email protected] |
| Dec 20, 2023 | Modified Analysis | [email protected] |
| Nov 7, 2023 | CVE Modified | [email protected] |
| Oct 20, 2023 | CVE Modified | [email protected] |
| Apr 25, 2023 | Initial Analysis | [email protected] |