Skip to content

Security: hlotiim/YouAnalytics

Security

SECURITY.md

Security

YouAnalytics is a WordPress plugin that reads Google Analytics 4 through Composio (analytics.readonly). It does not store Google passwords or OAuth tokens.

Report a vulnerability

Open a private security advisory on GitHub, or email the maintainer via the GitHub profile hlotiim. Please do not file a public issue for unreleased security bugs.

Include the plugin version (1.1.x in cumulative-analytics.php) and enough detail to reproduce.

Please do not

  • Open a public issue that includes API keys, tokens, or ca-local.php
  • Assume failed property reads are safe to treat as zero traffic (the plugin already marks those unavailable)

Secrets in this repository

ca-local.php is gitignored. Use ca-local.example.php as the empty template. Never commit keys or install zips that embed them.

There aren't any published security advisories