Lucene search
+L

585 matches found

Patchstack
Patchstack
added 2024/04/29 12:00 p.m.10 views

WordPress Analytify plugin <= 5.2.1 - Missing Authorization to Unauthenticated Google Analytics Tracking ID Modification vulnerability

Missing Authorization to Unauthenticated Google Analytics Tracking ID Modification vulnerability discovered by Francesco Carlucci in WordPress Plugin Analytify versions = 5.2.3...

5.3CVSS7AI score0.00435EPSS
SaveExploits0References1Affected Software1
WPVulnDB
WPVulnDB
added 2024/04/29 12:00 a.m.26 views

Analytify – Google Analytics Dashboard For WordPress (GA4 analytics made easy) < 5.2.4 - Missing Authorization

Description The Analytify – Google Analytics Dashboard For WordPress GA4 analytics made easy plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on AJAX functions in combination with nonce leakage. This makes it possible for authenticated attackers,...

5.4CVSS6AI score0.00291EPSS
SaveExploits0References1Affected Software1
WPVulnDB
WPVulnDB
added 2024/04/26 12:00 a.m.16 views

Analytify < 5.2.4 - Missing Authorization to Unauthenticated Google Analytics Tracking ID Modification

Description The Analytify – Google Analytics Dashboard For WordPress GA4 analytics made easy plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'wpacheckauthentication' function in all versions up to, and including, 5.2.1. This makes i...

5.3CVSS6.6AI score0.00435EPSS
SaveExploits0References1Affected Software1
NVD
NVD
added 2024/04/25 10:15 a.m.31 views

CVE-2023-52220

Missing Authorization vulnerability in MonsterInsights Google Analytics by Monster Insights.This issue affects Google Analytics by Monster Insights: from n/a through 8.21.0...

4.3CVSS4.7AI score0.00433EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/04/25 9:33 a.m.27 views

CVE-2023-52220 WordPress MonsterInsights plugin <= 8.21.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in MonsterInsights Google Analytics by Monster Insights.This issue affects Google Analytics by Monster Insights: from n/a through 8.21.0...

4.3CVSS6.9AI score0.00433EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/04/25 9:33 a.m.70 views

CVE-2023-52220 WordPress MonsterInsights plugin <= 8.21.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in MonsterInsights Google Analytics by Monster Insights.This issue affects Google Analytics by Monster Insights: from n/a through 8.21.0...

4.3CVSS5AI score0.00433EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/04/25 12:00 a.m.10 views

WordPress plugin Google Analytics by Monster Insights 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation, a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in the...

4.3CVSS8.9AI score0.00433EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/04/25 12:00 a.m.56 views

PT-2024-14484 · Monster Insights · Google Analytics

Name of the Vulnerable Software and Affected Versions: Google Analytics by Monster Insights versions 8.21.0 and earlier Description: The issue is related to a Missing Authorization vulnerability. This vulnerability affects the MonsterInsights Google Analytics plugin by Monster Insights...

4.3CVSS7AI score0.00433EPSS
SaveExploits0References4
WPVulnDB
WPVulnDB
added 2024/04/17 12:00 a.m.27 views

WP Google Analytics Events < 2.8.1 - Reflected Cross-Site Scripting

Description The WP Google Analytics Events – No-Code Custom Event Tracking for Google Analytics plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in all versions up to, and including, 2.8.0 due to insufficient input sanitization and output escaping. This makes it possible for...

7.1CVSS6.3AI score0.00351EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2024/04/15 7:15 a.m.11 views

CVE-2024-32145

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PineWise WP Google Analytics Events allows Reflected XSS.This issue affects WP Google Analytics Events: from n/a through 2.8.0...

6.1CVSS5.8AI score0.00351EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/04/15 7:03 a.m.15 views

CVE-2024-32145 WordPress WP Google Analytics Events – No-Code Custom Event Tracking for Google Analytics plugin <= 2.8.0 - Reflected Cross-Site Scripting vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PineWise WP Google Analytics Events allows Reflected XSS.This issue affects WP Google Analytics Events: from n/a through 2.8.0...

7.1CVSS6.9AI score0.00351EPSS
SaveExploits0References1
CVE
CVE
added 2024/04/15 7:03 a.m.89 views

CVE-2024-32145

CVE-2024-32145 affects the WP Google Analytics Events WordPress plugin (vulnerable up to 2.8.0). Root cause: Improper input neutralization during web page generation leading to Reflected XSS. Impact is reflected XSS as stated; CVSS scores in public metrics show base scores around 6.1 (NVD) and 7....

7.1CVSS5.2AI score0.00351EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2024/04/15 12:00 a.m.12 views

WordPress Plugin WP Google Analytics Events 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. WordPress Plugin WP Google Analytics Events A...

7.1CVSS6AI score0.00351EPSS
SaveExploits0References2
Patchstack
Patchstack
added 2024/04/12 11:12 a.m.10 views

WordPress WP Google Analytics Events – No-Code Custom Event Tracking for Google Analytics plugin <= 2.8.0 - Reflected Cross-Site Scripting vulnerability

Reflected Cross-Site Scripting vulnerability discovered by Brandon Roldan Patchstack Alliance in WordPress Plugin WP Google Analytics Events versions = 2.8.0...

7.1CVSS6.3AI score0.00351EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2024/04/12 12:00 a.m.17 views

WordPress WP Google Analytics Events Plugin <= 2.8.0 is vulnerable to Cross Site Scripting (XSS)

Software WP Google Analytics Events Type Plugin Vulnerable versions = 2.8.0 Fixed in 2.8.1 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-32145 Patch priority Low CVSS severity Low 7.1 Developer Claim ownership PSID 8fc4ab37d76e Credits Brandon Roldan Required...

7.1CVSS6.5AI score0.00351EPSS
SaveExploits0References2Affected Software1
NVD
NVD
added 2024/03/25 12:15 p.m.15 views

CVE-2022-45851

Missing Authorization vulnerability in ShareThis ShareThis Dashboard for Google Analytics.This issue affects ShareThis Dashboard for Google Analytics: from n/a through 3.1.4...

5.4CVSS5.5AI score0.00465EPSS
SaveExploits0References1
CVE
CVE
added 2024/03/25 11:30 a.m.103 views

CVE-2022-45851

CVE-2022-45851 affects the WordPress ShareThis Dashboard for Google Analytics plugin up to version 3.1.4. The issue is described as a Missing Authorization (Broken Access Control) vulnerability. The connected sources indicate no patched version is available for versions through 3.1.4 (Patchstack ...

5.4CVSS5.2AI score0.00465EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/03/25 11:30 a.m.25 views

CVE-2022-45851 WordPress ShareThis Dashboard for Google Analytics plugin <= 3.1.4 - Broken Access Control vulnerability

Missing Authorization vulnerability in ShareThis ShareThis Dashboard for Google Analytics.This issue affects ShareThis Dashboard for Google Analytics: from n/a through 3.1.4...

5.4CVSS5.8AI score0.00465EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/03/25 11:30 a.m.14 views

CVE-2022-45851 WordPress ShareThis Dashboard for Google Analytics plugin <= 3.1.4 - Broken Access Control vulnerability

Missing Authorization vulnerability in ShareThis ShareThis Dashboard for Google Analytics.This issue affects ShareThis Dashboard for Google Analytics: from n/a through 3.1.4...

5.4CVSS7AI score0.00465EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/03/25 12:00 a.m.10 views

WordPress Plugin ShareThis Dashboard for Google Analytics 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

5.4CVSS6.4AI score0.00465EPSS
SaveExploits0References2
Rows per page
Query Builder