Analytics and advertising integrations connect a WordPress dashboard to external services and expose site performance data to privileged users. Site Kit by Google – Analytics, Search Console, AdSense, Speed version 1.186.0 has successfully completed the CleanTalk Plugin Security Certification process and received PSC-2026-64685, confirming that the review focused on service connections, dashboard data access, REST requests, administrator actions, and safe rendering of remote metrics.
| Name of | Site Kit by Google – Analytics, Search Console, AdSense, Speed |
| Version | 1.186.0 |
| Active installations | 5+ million |
| Description | Connects WordPress with Google services including Search Console, Analytics, AdSense, and PageSpeed Insights, then presents setup and reporting tools in the dashboard. |
| Security | Successfully tested for: SQL Injection (SQLi) Cross-Site Scripting (XSS) – Stored and Reflected Cross-Site Request Forgery (CSRF) Authentication Vulnerabilities Authentication Bypass Exploits Privilege Escalation Buffer Overflow Denial-of-Service (DoS) vectors Data Leakage Vulnerabilities Insecure Dependency Usage Remote Code Execution (RCE) Risks Unauthorized File Access Insufficient Injection Protection Information Disclosure via Misconfigured Endpoints |
| CleanTalk Certification | Proudly earned the “Plugin Security Certification” (PSC) from CleanTalk, indicating adherence to stringent security standards. |
| Additional Information | Use Site Kit by Google – Analytics, Search Console, AdSense, Speed with confidence backed by the “Plugin Security Certification” (PSC). Review connected services, grant dashboard access only to trusted roles, and reconnect accounts when ownership or service permissions change. |
| Plugin Security Certification by CleanTalk |  |
| Logo of the plugin |  |
PSC by CleantalkJoin the community of developers who prioritize security. Highlight your plugin in the WordPress catalog.
Key Features
Site Kit by Google – Analytics, Search Console, AdSense, Speed brings reporting and setup for several Google products into the WordPress dashboard. Administrators can connect supported services without editing theme code and review data from Search Console, Analytics, AdSense, and PageSpeed Insights in one interface. These workflows combine privileged WordPress actions with authenticated requests to external Google services.
Security Assurance
The CleanTalk Plugin Security Certification evaluation focused on authorization around dashboard data, integrity of service setup actions, request validation, and safe handling of responses from connected services. The review also considered REST endpoints, stored settings, output escaping, account connection state, and the separation between public visitors and users who can view or modify integration data.
The plugin has been successfully tested for:
✅ Information Leakage Vulnerabilities
✅ SQL Injection Vulnerabilities
✅ Cross-Site Scripting (XSS) Attacks
✅ Cross-Site Request Forgery (CSRF) Attacks
✅ Authentication and Authentication Bypass Vulnerabilities
✅ Privilege Escalation Vulnerabilities
✅ Buffer Overflow Vulnerabilities
✅ Denial-of-Service (DoS) Vulnerabilities
✅ Data Leakage Vulnerabilities
✅ Insecure Dependencies
✅ Code Execution Vulnerabilities
✅ File Unauthorized Access Vulnerabilities
✅ Insufficient Injection Protection
Conclusion
With PSC-2026-64685, Site Kit by Google – Analytics, Search Console, AdSense, Speed version 1.186.0 demonstrates strong baseline security for Google service integration and dashboard reporting workflows. The certification addresses service connections, REST requests, stored settings, privileged actions, and presentation of remote metrics. Site owners should restrict dashboard access, review connected services regularly, and confirm permissions again after changes to site ownership or administrator roles.
Note: The date and certification information may change over time. It is advisable to verify the latest details on the plugin developer’s website.
