Vulnerabilities > Daan
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2024-01-11 | CVE-2023-6637 | Missing Authorization vulnerability in Daan Complete Analytics Optimization Suite The CAOS | Host Google Analytics Locally plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'update_settings' function in versions up to, and including, 4.7.14. | 5.3 |
| 2024-01-03 | CVE-2023-6600 | Cross-site Scripting vulnerability in Daan Omgf The OMGF | GDPR/DSGVO Compliant, Faster Google Fonts. | 5.4 |
| 2022-01-03 | CVE-2021-25020 | Path Traversal vulnerability in Daan Complete Analytics Optimization Suite The CAOS | Host Google Analytics Locally WordPress plugin before 4.1.9 does not validate the cache directory setting, allowing high privilege users to use a path traversal vector and delete arbitrary folders when uninstalling the plugin | 4.9 |