← All advisories

High severity8.5NVD Advisory· Published Oct 12, 2023· Updated Jun 17, 2026

CVE-2023-23651

CVE-2023-23651

Description

Auth. (subscriber+) SQL Injection (SQLi) vulnerability in MainWP Google Analytics Extension plugin <= 4.0.4 versions.

Affected products

3

Mainwp/Mainwp Google Analytics Extension2 versions
cpe:2.3:a:mainwp:mainwp_google_analytics_extension:*:*:*:*:*:wordpress:*:*+ 1 more
- cpe:2.3:a:mainwp:mainwp_google_analytics_extension:*:*:*:*:*:wordpress:*:*range: <=4.0.4
- (no CPE)range: n/a
WordPress/MainWP Google Analytics Extensionllm-create
Range: <=4.0.4

Patches

Vulnerability mechanics

References

1

patchstack.com/database/vulnerability/mainwp-google-analytics-extension/wordpress-mainwp-google-analytics-extension-plugin-4-0-4-subscriber-sql-injection-vulnerabilitynvdThird Party Advisory

News mentions

0

No linked articles in our index yet.