Incorrectly Configured Access Control Security Levels Put Easy Google Analytics for WordPress at Risk

CVE-2023-23887

What is CVE-2023-23887?

A serious access control vulnerability exists in the Shaon Easy Google Analytics for WordPress plugin. This flaw stems from the plugin's missing authorization checks, resulting in incorrectly configured access levels that can be exploited by malicious actors. Attackers may gain unauthorized access to sensitive data or functionality, emphasizing the need for immediate remediation. Users of the plugin versions ranging from n/a to 1.6.0 should review their access configurations and apply necessary updates to mitigate potential risks.

References