CVE-2024-1809: Exposure of Sensitive System Information to an Unauthorized Control Sphere

The Analytify – Google Analytics Dashboard For WordPress GA4 analytics made easy plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on AJAX functions in combination with nonce leakage in all versions up to, and including, 5.2.3. This makes it...

WordPress plugin Analytify 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

The vulnerability of the wpa_check_authentication() function in the Analytify plugin of the WordPress content management system allows a hacker to modify the Google Analytics tracking identifier of the website.

The vulnerability of the wpacheckauthentication function in the Analytify plugin of the WordPress content management system is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to modify the Google Analytics tracking identifier of t...

WordPress Analytify – Google Analytics Dashboard For WordPress (GA4 analytics made easy) plugin <= 5.2.3 - Missing Authorization vulnerability

Missing Authorization vulnerability discovered by Lucio Sá in WordPress Plugin Analytify versions = 5.2.3...

WordPress Analytify plugin <= 5.2.1 - Missing Authorization to Unauthenticated Google Analytics Tracking ID Modification vulnerability

Missing Authorization to Unauthenticated Google Analytics Tracking ID Modification vulnerability discovered by Francesco Carlucci in WordPress Plugin Analytify versions = 5.2.3...

WordPress Analytify Plugin <= 5.2.3 is vulnerable to Broken Access Control

Software Analytify Type Plugin Vulnerable versions = 5.2.3 Fixed in 5.2.4 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-1809 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID ab2e692a810a Credits Lucio Sá Required privilege Subscrib...

WordPress Analytify Plugin <= 5.2.3 is vulnerable to Broken Access Control

Software Analytify Type Plugin Vulnerable versions = 5.2.3 Fixed in 5.2.4 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-1584 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 5e5adc4ec40e Credits Francesco Carlucci Required privileg...

Analytify < 5.2.4 - Missing Authorization to Unauthenticated Google Analytics Tracking ID Modification

Description The Analytify – Google Analytics Dashboard For WordPress GA4 analytics made easy plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'wpacheckauthentication' function in all versions up to, and including, 5.2.1. This makes i...

PT-2024-3161 · WordPress · Analytify

Name of the Vulnerable Software and Affected Versions: Analytify – Google Analytics Dashboard For WordPress versions up to, and including, 5.2.1 Description: The issue is related to a missing capability check on the wpa check authentication function, which allows unauthorized modification of data...

Analytify Dashboard < 5.2.0 - Cross-Site Request Forgery

Description The Analytify – Google Analytics Dashboard For WordPress GA4 analytics made easy plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 5.1.1. This is due to missing or incorrect nonce validation on the sendanalyticsemail function. This...

Analytify Dashboard < 5.1.1 - Missing Authorization to Opt-In

Description The Analytify Dashboard plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the optinyes function in versions up to, and including, 5.1.0. This makes it possible for authenticated attackers, with subscriber-level and above acces...

WordPress Analytify Plugin <= 5.1.1 is vulnerable to Broken Access Control

Software Analytify Type Plugin Vulnerable versions = 5.1.1 Fixed in 5.2.0 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2023-47841 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 14d29f77111a Credits Abdi Pranata Required privilege...

WordPress Analytify Plugin <= 5.1.0 is vulnerable to Broken Access Control

Software Analytify Type Plugin Vulnerable versions = 5.1.0 Fixed in 5.1.1 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2023-41695 Patch priority Low CVSS severity Low 3.5 Developer Claim ownership PSID cd9a143f3c57 Credits Abdi Pranata Required privilege...

CVE-2022-38137

Cross-Site Request Forgery CSRF vulnerability in Analytify plugin = 4.2.2 on WordPress...

CVE-2022-38137

Cross-Site Request Forgery CSRF vulnerability in Analytify plugin = 4.2.2 on WordPress...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Analytify plugin = 4.2.2 on WordPress...

CVE-2022-38137

The CVE-2022-38137 issue affects the WordPress Analytify plugin, specifically versions

CVE-2022-38137 WordPress Analytify plugin <= 4.2.2 - Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Analytify plugin = 4.2.2 on WordPress...

CVE-2022-38137 WordPress Analytify plugin <= 4.2.2 - Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Analytify plugin = 4.2.2 on WordPress...

PT-2022-24230 · WordPress · Analytify

Name of the Vulnerable Software and Affected Versions: Analytify plugin versions = 4.2.2 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This means an attacker can trick a user into performing unintended actions on a web application that the user is authenticated to...