Lucene search

K
wpvulndbWpvulndbWPVDB-ID:309AEE4C-F4CE-4FB9-97C5-23D867D91EB7
HistoryJan 12, 2024 - 12:00 a.m.

Google Analytics by Monster Insights < 8.22.0 - Missing Authorization

2024-01-1200:00:00
wpscan.com
28
google analytics
monster insights
vulnerable
unauthorized access
capability check
authenticated attackers
subscriber-level access

AI Score

6.2

Confidence

High

EPSS

0

Percentile

9.0%

Description The plugin is vulnerable to unauthorized access due to a missing capability check in versions up to, and including, 8.21.0. This makes it possible for authenticated attackers, with subscriber-level access and above, to perform an unauthorized action.

AI Score

6.2

Confidence

High

EPSS

0

Percentile

9.0%

Related for WPVDB-ID:309AEE4C-F4CE-4FB9-97C5-23D867D91EB7