Read the docs

deconf

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

deconf records in CISA KEV

No deconf vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Analytics Insights 1 record LOW Clicky Analytics Dashboard 1 record LOW

Records

1 record in Analytics Insights · all components

TI-2024-00225 CVE-2024-0250 · GHSA-2h8g-h9q5-4vvx

Analytics Insights for Google Analytics 4 < 6.3 - Open Redirect

Priority LOW 30

The Analytics Insights for Google Analytics 4 (AIWP) WordPress plugin before 6.3 is vulnerable to Open Redirect due to insufficient validation on the redirect oauth2callback.php file.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01265 Published 2024-02-12 Fixed in 6.3 CWE-601
Open these records in search →