CVE-2023-6637

Summary

CVE-2023-6637: A vulnerability has been identified in the CAOS | Host Google Analytics Locally plugin for WordPress. Unauthenticated attackers can exploit this issue by bypassing the capability check on the 'update_settings' function, allowing them to modify plugin settings in versions up to 4.7.14. This vulnerability poses a significant risk, as attackers can make unauthorized changes to the plugin configuration without proper authorization. Users of this plugin are strongly advised to update to the latest version to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.