QA Analytics, CVE-2024-8513

CVE, Research URL: CVE-2024-8513
Home page URL: Security reports for QA Analytics
Application: QA Analytics
Published on: Oct 10, 2024
Research Description: The QA Analytics – Web Analytics Tool with Heatmaps & Session Replay Across All Pages plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ajax_save_plugin_config() function in all versions up to, and including, 4.1.1.1. This makes it possible for unauthenticated attackers to update the plugin's settings.
Affected versions: max 4.1.1.2.
Status: vulnerable