PLUGIN SECURITY
Is Google Analytics Dashboard For Wp safe?
Connects Google Analytics with your WordPress site. Displays stats to help you understand your users and site content on a whole new level!
What this plugin does
- Slug:
google-analytics-dashboard-for-wp - Author: Syed Balkhi
- 300000+ active installs
- 50/100 rating (1547 reviews on wordpress.org)
- 52437604 all-time downloads
- On WordPress.org since 2013-03-12
analyticsgoogle analyticsgoogle analytics dashboardgoogle analytics pluginwebsite stats
Maintenance status
- Latest known version: 10.1.2
- Last updated: 2026-08-19 7:32pm GMT
- Tested up to WordPress: 7.1
- Requires PHP: 7.2+
Known vulnerabilities
7 known CVEs on file for Google Analytics Dashboard For Wp.
| CVE | Vulnerability | Type | Severity | Affected | Fixed in | Published | Status |
|---|---|---|---|---|---|---|---|
| CVE-2026-5488 | ExactMetrics – Google Analytics Dashboard for WordPress (Website Stats Plugin) [google-analytics-dashboard-for-wp] < 9.1.3 | Missing Authorization | Medium 5.3 | < 9.1.3 | 9.1.3 | 2026-04-23 | ✓ fixed in latest |
| CVE-2026-5464 | ExactMetrics – Google Analytics Dashboard for WordPress (Website Stats Plugin) [google-analytics-dashboard-for-wp] < 9.1.3 | Missing Authorization | High 7.2 | < 9.1.3 | 9.1.3 | 2026-04-22 | ✓ fixed in latest |
| CVE-2025-24750 | ExactMetrics – Google Analytics Dashboard for WordPress (Website Stats Plugin) [google-analytics-dashboard-for-wp] < 8.2.0 | Missing Authorization | Medium 5.4 | < 8.2.0 | 8.2.0 | 2025-01-24 | ✓ fixed in latest |
| CVE-2023-23880 | ExactMetrics – Google Analytics Dashboard for WordPress (Website Stats Plugin) [google-analytics-dashboard-for-wp] < 7.14.2 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 6.5 | < 7.14.2 | 7.14.2 | 2023-05-09 | ✓ fixed in latest |
| CVE-2023-0082 | ExactMetrics – Google Analytics Dashboard for WordPress (Website Stats Plugin) [google-analytics-dashboard-for-wp] < 7.12.1 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 5.4 | < 7.12.1 | 7.12.1 | 2023-01-13 | ✓ fixed in latest |
| — | ExactMetrics – Google Analytics Dashboard for WordPress (Website Stats Plugin) [google-analytics-dashboard-for-wp] < 9.0.3 | — | Unknown | < 9.0.3 | 9.0.3 | 0000-00-00 | ✓ fixed in latest |
| — | ExactMetrics – Google Analytics Dashboard for WordPress (Website Stats Plugin) [google-analytics-dashboard-for-wp] < 9.0.3 | — | Unknown | < 9.0.3 | 9.0.3 | 0000-00-00 | ✓ fixed in latest |
| CVE-2026-1993 | ExactMetrics 7.1.0 - 9.0.2 - Improper Privilege Management to Role Privilege Escalation via Settings Update | — | Unknown | < 9.0.3 | 9.0.3 | — | ✓ fixed in latest |
+ 1 more known vulnerability
| CVE | Vulnerability | Type | Severity | Affected | Fixed in | Published | Status |
|---|---|---|---|---|---|---|---|
| CVE-2026-1992 | ExactMetrics 8.6.0 - 9.0.2 - Insecure Direct Object Reference to Arbitrary Plugin Installation | — | Unknown | < 9.0.3 | 9.0.3 | — | ✓ fixed in latest |
How to fix it
Keep Google Analytics Dashboard For Wp updated — 10.1.2 is the latest version on wordpress.org, and each CVE above lists the exact release that fixed it ("Fixed in").
This is the plugin's full known vulnerability history, not a scan of any specific installation — run a free scan of your own site to check your exact installed version.
Safer / more established alternatives
- Site Kit by Google – Analytics, Search Console, AdSense, Speed — 5000000+ active installs — 84/100 (1009)
- MonsterInsights – Google Analytics Dashboard for WordPress (Website Stats Made Easy) — 2000000+ active installs — 90/100 (3149) — max PHP 8.4
- GTM4WP – A Google Tag Manager (GTM) plugin for WordPress — 700000+ active installs — 90/100 (154) — max PHP 8.4
- WP Statistics – Simple, privacy-friendly Google Analytics alternative — 600000+ active installs — 82/100 (757) — max PHP <8.0
- GA Google Analytics – Connect Google Analytics to WordPress — 400000+ active installs — 98/100 (158) — max PHP 8.4
Check your own WordPress site
Run a free passive scan now, or create a free account and install the WP Clinic plugin for a deep scan of your whole hosting account and AI-assisted repair.