CVE-2024-0250

The Analytics Insights for Google Analytics 4 AIWP WordPress plugin before 6.3 is vulnerable to Open Redirect due to insufficient validation on the redirect oauth2callback.php file. This makes it possible for unauthenticated attackers to redirect users to potentially malicious sites if they can...

Cross-site Scripting (XSS)

oauth2client is vulnerable to cross-site scripting XSS attack. These attacks are possible because there is no sanitization in the error parameter, allowing attacks to reflect arbitrary code onto the oauth2callback endpoint...