WordPress plugin
CAOS | Host Google Analytics Locally security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 2 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High0
- Medium2
- Low0
All CAOS | Host Google Analytics Locally vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium6.5 | Missing Authorization to Unauthenticated Plugin Settings Update ≤4.7.14Update to 4.7.15 | CVE-2023-6637 | |
| Medium4.9 | Admin+ Arbitrary Folder Deletion via Path Traversal ≤4.1.8Update to 4.1.9 | CVE-2021-25020 |
- Medium6.5Missing Authorization to Unauthenticated Plugin Settings Update
≤4.7.14Update to 4.7.15
- Medium4.9Admin+ Arbitrary Folder Deletion via Path Traversal
≤4.1.8Update to 4.1.9
CAOS | Host Google Analytics Locally: common questions
Does CAOS | Host Google Analytics Locally have known vulnerabilities?
Yes. VulnCrest Radar lists 2 known vulnerabilities in CAOS | Host Google Analytics Locally: 2 medium. None are known to affect version null.
How do I check which version of CAOS | Host Google Analytics Locally I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent CAOS | Host Google Analytics Locally vulnerability?
CVE-2023-6637, published Dec 12, 2023: CAOS | Host Google Analytics Locally <= 4.7.14 - Missing Authorization to Unauthenticated Plugin Settings Update. Severity: Medium (CVSS 6.5).
Is any CAOS | Host Google Analytics Locally vulnerability listed in CISA KEV?
No. None of the known CAOS | Host Google Analytics Locally vulnerabilities is currently listed in the CISA KEV catalog.