CVE-2024-13321

CVE-2024-13321 affects AnalyticsWP for WordPress. A SQL Injection via the custom_sql parameter exists in all versions up to 2.0.0 due to insufficient authorization checks in handle_get_stats(), enabling unauthenticated queries to access data. The vulnerability is publicly documented and has a pat...