Analytics Insights Vulnerabilities

[en] The Analytics Insights for Google Analytics 4 (AIWP) WordPress plugin before 6.3 is vulnerable to Open Redirect due to insufficient validation on the redirect oauth2callback.php file. This makes it possible for unauthenticated attackers to redirect users to potentially malicious sites if they can successfully tric...

Affected:

up to 6.3

Fixed in:

6.3

Disclosed:

Feb 12, 2024

CVE-2024-0250 on NVD →

The Analytics Insights – Google Analytics Dashboard for WordPress plugin for WordPress is vulnerable to Open Redirect in all versions up to, and including, 6.2. This is due to insufficient validation on the redirect url supplied via the 'state' parameter. This makes it possible for unauthenticated attackers to redirect...

CVSS:

6.1

Affected:

up to 6.2

Fixed in:

6.3

Disclosed:

Jan 17, 2024

CVE-2024-0250 on NVD →