WordPress Analytify Plugin Privilege Escalation Vulnerability

A missing authorization vulnerability allowing privilege escalation has been identified in the WordPress Analytify Google Analytics Dashboard plugin, affecting versions through 4.2.3. This vulnerability could enable a low-privileged user to gain higher privileges, potentially leading to full control of the website.

Impact

Exploitation of this vulnerability could allow a low-privileged user to escalate their privileges, gaining higher access rights and possibly full control over the website.

Remediation

Users of the WordPress Analytify Google Analytics Dashboard plugin should update to version 4.3.0 or later. Patchstack users can enable auto-update for vulnerable plugins.