Approved changes feed: RSS · Atom

cpe:2.3:a:sharethis:sharethis_dashboard_for_google_analytics:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSharethis (f3a47556-248d-5042-8d30-5ba1e59c7225)
ProductSharethis Dashboard For Google Analytics (92629b8f-7eff-59d2-a001-8d497ce3c5e1)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-32282 vulnerable 2026-06-08 07:18:59.413730 WordPress ShareThis Dashboard for Google Analytics plugin <= 3.2.3 - Cross Site Request Forgery (CSRF) vulnerability
MEDIUM (4.3)
Cross-Site Request Forgery (CSRF) vulnerability in ShareThis ShareThis Dashboard for Google Analytics googleanalytics.This issue affects ShareThis Dashboard for Google Analytics: from n/a through <= 3.2.3.
Published: 2025-04-10T08:09:48.186Z
Updated: 2026-04-28T16:12:20.596Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-1507 vulnerable 2026-06-08 07:08:37.144684 ShareThis Dashboard for Google Analytics <= 3.2.1 - Missing Authorization to Unauthenticated Feature Deactivation
MEDIUM (5.3)
The ShareThis Dashboard for Google Analytics plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the handle_actions() function in all versions up to, and including, 3.2.1. This makes it possible for unauthenticated attackers to disable all features.
Published: 2025-03-14T08:23:04.440Z
Updated: 2026-04-08T16:45:07.542Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-12540 vulnerable 2026-06-08 07:04:30.386323 ShareThis Dashboard for Google Analytics <= 3.2.4 - Unauthenticated Google Analytics Data Exposure
MEDIUM (4.7)
The ShareThis Dashboard for Google Analytics plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.2.4. This is due to the Google Analytics client_ID and client_secret being stored in plaintext in the publicly visible plugin source. This can allow unauthenticated attackers to craft a link to the sharethis.com server, which will share an authorization token for Google Analytics with a malicious website, if the attacker can trick an administrator logged into the website and Google Analytics to click the link.
Published: 2026-01-07T08:21:52.708Z
Updated: 2026-04-08T16:58:14.741Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-45851 vulnerable 2026-06-08 05:50:37.331605 WordPress ShareThis Dashboard for Google Analytics plugin <= 3.1.4 - Broken Access Control vulnerability
MEDIUM (5.4)
Missing Authorization vulnerability in ShareThis ShareThis Dashboard for Google Analytics.This issue affects ShareThis Dashboard for Google Analytics: from n/a through 3.1.4.
Published: 2024-03-25T11:30:01.903Z
Updated: 2026-04-28T16:07:54.324Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.