Site Kit by Google – Analytics, Search Console, AdSense, Speed

WordPress plugin · google-site-kit · WordPress.org ↗

Latest v1.187.0 Last release Sep 7, 2026 Tested up to WP 7.1.1 5,000,000+ active installs

Critical

High

Known total

Unfixed

Running Site Kit by Google – Analytics, Search Console, AdSense, Speed on your site? WP Alerts checks your installed version against every entry below and emails you only when one affects you. Free, no tracking.

Scan a site Monitor my sites →

Severity	Vulnerability	Affected	Fixed in	CVE	Published
MEDIUM CVSS 4.3	Site Kit by Google – Analytics, Search Console, AdSense, Speed [google-site-kit] < 1.187.0 WPVulnerability	< 1.187.0	v1.187.0	CVE-2026-62139	Jun 25, 2026
MEDIUM CVSS 4.3	Site Kit by Google – Analytics, Search Console, AdSense, Speed [google-site-kit] < 1.8.0 WPVulnerability	< 1.8.0	v1.8.0	CVE-2020-8934	May 21, 2020
UNKNOWN	Site Kit by Google – Analytics, Search Console, AdSense, Speed [google-site-kit] < 1.176.0 WPVulnerability · PoC available	< 1.176.0	v1.176.0	CVE-2026-10753	Jun 24, 2026
UNKNOWN	Site Kit by Google – Analytics, Search Console, AdSense, Speed [google-site-kit] < 1.8.0 WPVulnerability	< 1.8.0	v1.8.0	—	May 13, 2020
UNKNOWN	Site Kit by Google – Analytics, Search Console, AdSense, Speed [google-site-kit] < 1.8.0 WPVulnerability	< 1.8.0	v1.8.0	—	—

Data aggregated from WPVulnerability, NVD/NIST, ENISA EUVD, CVE.org and WordPress.org. Provided as-is; verify with the plugin author before acting. Disclaimer.