CVE-2023-23651

Auth. subscriber+ SQL Injection SQLi vulnerability in MainWP Google Analytics Extension plugin = 4.0.4 versions...

CVE-2023-23651 WordPress MainWP Google Analytics Extension Plugin <= 4.0.4 - SQL Injection vulnerability

Auth. subscriber+ SQL Injection SQLi vulnerability in MainWP Google Analytics Extension plugin = 4.0.4 versions...

CVE-2023-23651

The CVE-2023-23651 entry concerns the WordPress plugin MainWP Google Analytics Extension (

CVE-2023-23651 WordPress MainWP Google Analytics Extension Plugin <= 4.0.4 - SQL Injection vulnerability

Auth. subscriber+ SQL Injection SQLi vulnerability in MainWP Google Analytics Extension plugin = 4.0.4 versions...

HackerOne: Organization members can delete reports in teams they have no access to

Reports in teams could be deleted by organization members without access to those teams. The vulnerability allowed deletion of analytics reports for restricted teams through a GraphQL mutation even when members lacked permissions to view or edit those reports...

Knime Analytics Platform Cross-Site Scripting Vulnerability

Knime Analytics Platform is a free and open source data analytics, reporting and integration platform from Knime, Switzerland. A cross-site scripting vulnerability exists in KNIME Analytics Platform versions prior to 5.2.0, which arises from insecure default settings that allow cross-site scripti...

PT-2023-32177 · Knime · Knime Analytics Platform

Name of the Vulnerable Software and Affected Versions: KNIME Analytics Platform versions prior to 5.2.0 Description: The issue is related to an unsafe default configuration that allows for a cross-site scripting attack. When KNIME Analytics Platform is used as an executor for either KNIME Server ...

PT-2023-19104 · WordPress · Mainwp Google Analytics Extension

Name of the Vulnerable Software and Affected Versions: MainWP Google Analytics Extension plugin versions = 4.0.4 Description: The issue is related to an authenticated SQL Injection vulnerability. This means that an attacker with subscriber-level access or higher can potentially inject malicious S...

WordPress plugin MainWP Google Analytics Extension SQL Injection Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection vulnerabili...

Why Cool Dashboards Don’t Equal Effective Security Analytics

Mark Twain once said, “Data is like garbage. You’d better know what you are going to do with it before you collect it.” This statement rings true in todays cybersecurity landscape. Security professionals are inundated with a flood of data, and often, they dont know how to make sense of it. To add...

Enhanced Ecommerce Google Analytics for WooCommerce < 3.7.2 - CSRF

Description The plugin does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks...

The vulnerability of the SonicWall Analytics analytical service and the SonicWall Global Management System (GMS), a global network firewall management system, stems from the rigid encoding of application Tomcat’s configuration files. This allows attackers to exploit their privileges.

The vulnerability of the SonicWall Analytics analytical service and the SonicWall Global Management System GMS global network management system is related to the rigid encoding of application Tomcat’s configuration files. Exploiting this vulnerability can allow a malicious actor to increase their...

WordPress Hitsteps Web Analytics Plugin <= 5.86 is vulnerable to Cross Site Request Forgery (CSRF)

Software Hitsteps Web Analytics Type Plugin Vulnerable versions = 5.86 Fixed in 5.87 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-45268 Patch priority Low CVSS severity Low 4.3 Developer Hitsteps PSID d49e0133f62f Credits Mika Required privile...

CVE-2023-40561

Cross-Site Request Forgery CSRF vulnerability in theDotstore Enhanced Ecommerce Google Analytics for WooCommerce plugin = 3.7.1 versions...

CVE-2023-40561

Cross-Site Request Forgery CSRF vulnerability in theDotstore Enhanced Ecommerce Google Analytics for WooCommerce plugin = 3.7.1 versions...

CVE-2023-40561

CVE-2023-40561 is a CSRF vulnerability in the Dotstore Enhanced Ecommerce Google Analytics for WooCommerce plugin (versions

WordPress Plugin Enhanced Ecommerce Google Analytics for WooCommerce Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress Plugin Enhanced Ecommerce...

WordPress Hitsteps Web Analytics Plugin <= 5.86 is vulnerable to Cross Site Scripting (XSS)

Software Hitsteps Web Analytics Type Plugin Vulnerable versions = 5.86 Fixed in 5.87 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-45057 Patch priority Low CVSS severity Low 5.9 Developer Hitsteps PSID c79b55ce60ef Credits Rio Darmawan Required...

WordPress Slimstat Analytics Plugin < 5.0.9 XSS Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wp-slimstat:slimstatanalytics"; ifdescription...

Security Bulletin: IBM Cognos Analytics has addressed multiple security vulnerabilities (CVE-2022-48285, CVE-2023-35009, CVE-2023-35011)

Summary Security vulnerabilities have been addressed in IBM Cognos Analytics. IBM Cognos Analytics is vulnerable to an Arbitrary File Write via Archive Extraction Zip Slip in JSZip CVE-2022-48285. This has been addressed by upgrading JZIP to a non-vulnerable version. A Server-Side Request Forgery...