CVE-2021-25020 | BDVDB-2026-167021 Detail

CAOS | Host Google Analytics Locally

Description#

The CAOS | Host Google Analytics Locally WordPress plugin before 4.1.9 does not validate the cache directory setting, allowing high privilege users to use a path traversal vector and delete arbitrary folders when uninstalling the plugin

Impact#

No impact statement in the source data.

Weaknesses#

CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

References#

https://wpscan.com/vulnerability/67398332-b93e-46ae-8904-68419949a124

Exploit#

No public exploit known

History#

Version 12022-01-03Record published in the CVE List.
Version 22024-08-03Most recent update recorded in the CVE List.