MainWP Google Analytics Extension SQL Injection Vulnerability

A SQL injection vulnerability has been identified in the MainWP Google Analytics Extension for WordPress, affecting versions through 4.0.4. This vulnerability allows authenticated subscribers and higher to manipulate database queries, potentially leading to unauthorized data access or modification.

Impact

Exploitation of this vulnerability allows for direct interaction with the database, which could be used to steal information or manipulate data.

Remediation

Users of the MainWP Google Analytics Extension should update to version 4.0.5 or later. Patchstack users can enable auto-update for vulnerable plugins.