Incorrectly Configured Access Control Security Levels Put Easy Google Analytics for WordPress at Risk
CVE-2023-23887
Key Information:
- Vendor
Wordpress
- Vendor
- CVE Published:
- 9 December 2024
What is CVE-2023-23887?
A serious access control vulnerability exists in the Shaon Easy Google Analytics for WordPress plugin. This flaw stems from the plugin's missing authorization checks, resulting in incorrectly configured access levels that can be exploited by malicious actors. Attackers may gain unauthorized access to sensitive data or functionality, emphasizing the need for immediate remediation. Users of the plugin versions ranging from n/a to 1.6.0 should review their access configurations and apply necessary updates to mitigate potential risks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
Easy Google Analytics for WordPress <= 1.6.0
References
CVSS V3.1
Timeline
Vulnerability published
Vulnerability Reserved