ShareThis Dashboard for Google Analytics Missing Authorization Vulnerability in WordPress Plugin

Vulnerability

A vulnerability exists in the ShareThis Dashboard for Google Analytics WordPress plugin, all versions through 3.2.1. The issue arises from a lack of proper capability checks in the handle_actions() function, allowing unauthorized users to disable plugin features. This vulnerability could be exploited by unauthenticated attackers to disrupt the functionality of the plugin.

Impact

Exploitation of this vulnerability allows for unauthorized deactivation of all plugin features, potentially disrupting website functionality or analytics tracking.

Remediation

Users are advised to update the ShareThis Dashboard for Google Analytics plugin to version 3.2.2 or a newer patched version.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
1.0
impact
0.6
exploitability
8.2
remediation
7.7
relevance
0.0
threat
3.2
urgency
2.9
incentive
5.8

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.