Cross-Site Scripting Vulnerability in Google Analytics by Yoast for WordPress
CVE-2014-9174

Currently unrated

Key Information:

Vendor: Wordpress
Status: Google Analytics
Vendor: CVE Published:; 2 December 2014

What is CVE-2014-9174?

A cross-site scripting vulnerability exists in the Google Analytics by Yoast plugin for WordPress before version 5.1.3. This flaw allows remote attackers to inject arbitrary web scripts or HTML through the 'Manually enter your UA code' field located in the General Settings. Successful exploitation can lead to unauthorized script execution in the context of the user's browser session, potentially compromising sensitive information and altering site behavior.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch