WordPress plugin
Embed Google Datastudio security & vulnerabilities
Unpatched vulnerability in the latest version
At least one vulnerability affects the latest version and no fix has been released. Deactivate the plugin or restrict access to the affected feature until the vendor ships a patch.
- Critical0
- High0
- Medium1
- Low0
All Embed Google Datastudio vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium6.4 | Authenticated (Contributor+) Stored Cross-Site Scripting ≤1.0.0No patch available | CVE-2025-9877 |
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
≤1.0.0No patch available
Embed Google Datastudio: common questions
Does Embed Google Datastudio have known vulnerabilities?
Yes. VulnCrest Radar lists 1 known vulnerability in Embed Google Datastudio: 1 medium. At least one is not fixed in the latest version.
How do I check which version of Embed Google Datastudio I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Embed Google Datastudio vulnerability?
CVE-2025-9877, published Sep 11, 2025: Embed Google Datastudio <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting. Severity: Medium (CVSS 6.4).
Is any Embed Google Datastudio vulnerability listed in CISA KEV?
No. None of the known Embed Google Datastudio vulnerabilities is currently listed in the CISA KEV catalog.