SQL Injection
3 records30%First: 2022. Latest: 2024.
Plugin security history
Conversios – GA4, Google Ads & Meta Conversion Tracking with Product Feed for WooCommerce Vulnerability History & Security Timeline
The Wordfence Intelligence dataset currently contains 10 vulnerability records associated with Conversios – GA4, Google Ads & Meta Conversion Tracking with Product Feed for WooCommerce, published between 2022 and 2025.
Dataset last synchronized: 2026-08-03 00:31:25 UTC
At a glance
Security Snapshot
10Total records
0Critical
3High
7Medium
0Low
0Informational
10Patched records
0Currently marked unpatched
2022-02-01First disclosure
2025-10-05Latest disclosure
10 of 10CVE coverage
Use this history
Check and watch Conversios – GA4, Google Ads & Meta Conversion Tracking with Product Feed for WooCommerce.
A history record does not establish whether the version installed on your website is affected. Enter the exact version in the checker, or add this software to a private Critical/High alert watchlist.
Year-by-Year Timeline
| Year | Records | Relative volume |
|---|---|---|
| 2022 | 1 | |
| 2023 | 3 | |
| 2024 | 4 | |
| 2025 | 2 |
Severity Breakdown
| Severity | Records | Share |
|---|---|---|
| High | 3 | 30% |
| Medium | 7 | 70% |
Vulnerability-Type Breakdown
Cross-Site Scripting
3 records30%First: 2023. Latest: 2024.
Missing Authorization
3 records30%First: 2023. Latest: 2025.
CSRF
1 record10%First: 2023. Latest: 2023.
Patch Status
- Patched
- 10
- Currently marked unpatched
- 0
- Unknown status
- 0
Patch status reflects the latest successfully synchronized source dataset and must be checked against the installed version.
Latest Known Patched Versions
7.2.147.2.47.1.17.0.07.0.86.5.16.5.45.2.44.6.2
Affected-Version History
Ranges are deduplicated by source range record and shown with the associated disclosure and known patched versions.
| Affected range | Vulnerability | Published | Patched version | Severity |
|---|---|---|---|---|
*-7.2.13 | Conversios.io <= 7.2.13 - Missing Authorization | October 5, 2025 | 7.2.14 | Medium |
*-7.2.3 | Conversios.io <= 7.2.3 - Missing Authorization | March 27, 2025 | 7.2.4 | Medium |
*-7.1.0 | Conversios.io - All-in-one Google Analytics, Pixels and Product Feed Manager for WooCommerce <= 7.1.0 - Reflected Cross-Site Scripting | June 27, 2024 | 7.1.1 | Medium |
*-6.9.1 | Conversios.io <= 6.9.1 - Reflected Cross-Site Scripting | March 25, 2024 | 7.0.0 | Medium |
*-7.0.7 | Conversios <= 7.0.7 - Authenticated (Subscriber+) SQL Injection via ee_syncProductCategory | February 27, 2024 | 7.0.8 | High |
*-7.0.7 | Conversios – Google Analytics 4 (GA4), Meta Pixel & more Via Google Tag Manager For WooCommerce <= 7.0.7 - Authenticated (Subscriber+) SQL Injection | February 27, 2024 | 7.0.8 | High |
*-6.5.0 | Conversios.io <= 6.5.0 - Missing Authorization | December 26, 2023 | 6.5.1 | Medium |
*-6.5.3 | Conversios.io <= 6.5.3 - Reflected Cross-Site Scripting | October 17, 2023 | 6.5.4 | Medium |
*-5.2.3 | All-in-one Google Analytics, Pixels and Product Feed Manager for WooCommerce <= 5.2.3 - Cross-Site Request Forgery | February 6, 2023 | 5.2.4 | Medium |
[*, 4.6.2) | Conversios.io - Google Analytics and Google Shopping plugin for WooCommerce <= 4.6.1 Authenticated SQL Injection | February 1, 2022 | 4.6.2 | High |
Selected source records
Latest Records
MediumCVE-2025-62925
Conversios.io <= 7.2.13 - Missing Authorization
Published: October 5, 2025
- Affected versions
- *-7.2.13
- Patched versions
- 7.2.14
MediumCVE-2025-30909
Conversios.io <= 7.2.3 - Missing Authorization
Published: March 27, 2025
- Affected versions
- *-7.2.3
- Patched versions
- 7.2.4
MediumCVE-2024-6288
Conversios.io - All-in-one Google Analytics, Pixels and Product Feed Manager for WooCommerce <= 7.1.0 - Reflected Cross-Site Scripting
Published: June 27, 2024
- Affected versions
- *-7.1.0
- Patched versions
- 7.1.1
MediumCVE-2024-29794
Conversios.io <= 6.9.1 - Reflected Cross-Site Scripting
Published: March 25, 2024
- Affected versions
- *-6.9.1
- Patched versions
- 7.0.0
HighCVE-2024-1203
Conversios – Google Analytics 4 (GA4), Meta Pixel & more Via Google Tag Manager For WooCommerce <= 7.0.7 - Authenticated (Subscriber+) SQL Injection
Published: February 27, 2024
- Affected versions
- *-7.0.7
- Patched versions
- 7.0.8
HighCVE-2024-0786
Conversios <= 7.0.7 - Authenticated (Subscriber+) SQL Injection via ee_syncProductCategory
Published: February 27, 2024
- Affected versions
- *-7.0.7
- Patched versions
- 7.0.8
MediumCVE-2023-51357
Conversios.io <= 6.5.0 - Missing Authorization
Published: December 26, 2023
- Affected versions
- *-6.5.0
- Patched versions
- 6.5.1
MediumCVE-2023-46094
Conversios.io <= 6.5.3 - Reflected Cross-Site Scripting
Published: October 17, 2023
- Affected versions
- *-6.5.3
- Patched versions
- 6.5.4
Highest-Severity Records
HighCVE-2024-1203
Conversios – Google Analytics 4 (GA4), Meta Pixel & more Via Google Tag Manager For WooCommerce <= 7.0.7 - Authenticated (Subscriber+) SQL Injection
Published: February 27, 2024
- Affected versions
- *-7.0.7
- Patched versions
- 7.0.8
HighCVE-2021-24952
Conversios.io - Google Analytics and Google Shopping plugin for WooCommerce <= 4.6.1 Authenticated SQL Injection
Published: February 1, 2022
- Affected versions
- [*, 4.6.2)
- Patched versions
- 4.6.2
HighCVE-2024-0786
Conversios <= 7.0.7 - Authenticated (Subscriber+) SQL Injection via ee_syncProductCategory
Published: February 27, 2024
- Affected versions
- *-7.0.7
- Patched versions
- 7.0.8
MediumCVE-2023-46094
Conversios.io <= 6.5.3 - Reflected Cross-Site Scripting
Published: October 17, 2023
- Affected versions
- *-6.5.3
- Patched versions
- 6.5.4
MediumCVE-2024-29794
Conversios.io <= 6.9.1 - Reflected Cross-Site Scripting
Published: March 25, 2024
- Affected versions
- *-6.9.1
- Patched versions
- 7.0.0
MediumCVE-2023-51357
Conversios.io <= 6.5.0 - Missing Authorization
Published: December 26, 2023
- Affected versions
- *-6.5.0
- Patched versions
- 6.5.1
MediumCVE-2024-6288
Conversios.io - All-in-one Google Analytics, Pixels and Product Feed Manager for WooCommerce <= 7.1.0 - Reflected Cross-Site Scripting
Published: June 27, 2024
- Affected versions
- *-7.1.0
- Patched versions
- 7.1.1
MediumCVE-2025-62925
Conversios.io <= 7.2.13 - Missing Authorization
Published: October 5, 2025
- Affected versions
- *-7.2.13
- Patched versions
- 7.2.14
Need help reviewing an exposed WordPress website?
Running an affected version does not prove that a website was compromised. Suspicious redirects, unknown administrators, injected content, unexpected files or recurring malware may require a manual investigation.
Vulnerability data: Wordfence Intelligence. Analysis and practical guidance: 3Zero Digital.
Data Source, Attribution and Methodology
This page aggregates active Production Feed records. Counts are not software-quality rankings, and an affected version does not prove exploitation or infection. Read the full methodology.