WordPress Analytics Reduce Bounce Rate Plugin Cross-Site Request Forgery Vulnerability

A Cross-Site Request Forgery (CSRF) vulnerability exists in the Analytics Reduce Bounce Rate plugin for WordPress, affecting all versions through 2.3. The issue arises from inadequate nonce validation in the 'unbounce_options' function, allowing unauthenticated attackers to alter Google Analytics tracking settings by tricking a site administrator into clicking a link.

Impact

Exploitation of this vulnerability could lead to unauthorized changes in Google Analytics tracking settings, potentially allowing attackers to manipulate how website traffic is reported.