Unauthorized Data Modification in CAOS | Host Google Analytics Locally Plugin for WordPress
CVE-2023-6637
5.3MEDIUM
Key Information:
- Vendor
WordPress
- Vendor
- CVE Published:
- 11 January 2024
What is CVE-2023-6637?
The CAOS | Host Google Analytics Locally plugin for WordPress has a vulnerability that allows unauthenticated attackers to exploit the absence of a capability check in the 'update_settings' function, present in versions up to 4.7.14. This flaw could lead to unauthorized modifications of the plugin settings, thereby posing a significant risk to website security and compromising data integrity.
Affected Version(s)
CAOS | Host Google Analytics Locally * <= 4.7.14