Looks like WPTavern this time is a bit late with the newsL...

A security flaw in the popular Wordpress plugin Google Analytics by Yoast allows hackers to execute arbitrary code and take over administrator accounts.

Revealed on Thursday by Finnish security researcher Jouko Pynnonen on Full Disclosure, the plugin's security issue allows an unauthenticated attacker to store arbitrary HTML, including JavaScript, in the WordPress administrator's Dashboard on the target system -- and which is triggered when an admin views the plugin's settings panel.