- Impact
- 8,934
Dear NameCrop.Com,
A new version of the Wordpress plugin "Google Analytics by Yoast" (5.4.1) has been released. A recent hack was found in older versions of this plugin which allows an attacker to perform Cross-site Scripting (XSS) with no authentication required.
Over the next 48 hours we will be making every attempt to upgrade any "Google Analytics by Yoast" plugins to the most recent version 5.4.1. We strongly encourage you to check your plugin version to make sure it is on the newest version. We also recommend you update your WordPress installation(s), plugins, and themes to the most current versions to prevent any additional vulnerabilities.
A new version of the Wordpress plugin "Google Analytics by Yoast" (5.4.1) has been released. A recent hack was found in older versions of this plugin which allows an attacker to perform Cross-site Scripting (XSS) with no authentication required.
Over the next 48 hours we will be making every attempt to upgrade any "Google Analytics by Yoast" plugins to the most recent version 5.4.1. We strongly encourage you to check your plugin version to make sure it is on the newest version. We also recommend you update your WordPress installation(s), plugins, and themes to the most current versions to prevent any additional vulnerabilities.