Read the docs

Daan

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Daan records in CISA KEV

No Daan vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Complete Analytics Optimization Suite 2 records LOW Omgf 1 record MEDIUM

Records

3 records

TI-2023-06083 CVE-2023-6637 · GHSA-6f3f-79vg-xw6w

CAOS | Host Google Analytics Locally <= 4.7.14 - Missing Authorization to Unauthenticated Plugin Settings Update

Priority LOW 36

The CAOS | Host Google Analytics Locally plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'update_settings' function in versions up to, and including, 4.7.1…

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00542 Published 2024-01-11 No fix listed CWE-862
TI-2021-07298 CVE-2021-25020 · GHSA-hgpj-mg5q-324q

CAOS < 4.1.9 - Admin+ Arbitrary Folder Deletion via Path Traversal

Priority LOW 25

The CAOS | Host Google Analytics Locally WordPress plugin before 4.1.9 does not validate the cache directory setting, allowing high privilege users to use a path traversal vector and delete arbitrary folders when uninsta…

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01055 Published 2022-01-03 Fixed in 4.1.9 CWE-22
Open these records in search →