CVE Database /
CVE-2023-52220
CVE · Medium
CVE-2023-52220 — MonsterInsights – Google Analytics Dashboard for WordPress (Website Stats Made Easy) [google-analytics-for-wordpress] < 8.22.0
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2023-52220
|
MonsterInsights – Google Analytics Dashboard for WordPress (Website Stats Made Easy) [google-analytics-for-wordpress] < 8.22.0 |
Missing Authorization |
Medium
4.3
|
< 8.22.0
|
8.22.0 |
2024-01-05 |
—
|
CVE-2023-52220
The MonsterInsights Google Analytics plugin for WordPress contained a broken access control vulnerability in versions before 8.22.0 that allowed unauthenticated or low-privileged users to perform actions normally restricted to higher-privileged accounts due to missing authorization checks and nonce validation. Researcher Rafie Muhammad discovered and reported this flaw through Patchstack. Users should upgrade to version 8.22.0 or later to remediate this issue.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings