10webanalytics CVEs and Security Vulnerabilities

CVE-2023-47807

WordPress 10WebAnalytics plugin <= 1.2.12 - Broken Access Control vulnerability

Missing Authorization vulnerability in 10Web 10WebAnalytics wd-google-analytics allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects 10WebAnalytics: from n/a through <= 1.2.12.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed

Vendors

10web

Products

10webanalytics

CVE-2020-36756

10WebAnalytics <= 1.2.8 - Cross-Site Request Forgery Bypass

The 10WebAnalytics plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.2.8. This is due to missing or incorrect nonce validation on the create_csv_file() function. This makes it possible for unauthenticated attackers to create a CSV file via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.