Skip to content
Threat Feed
Subscribe

Tag

Analytics

2 briefs RSS
medium advisory

Matomo Information Disclosure Vulnerability

A vulnerability in Matomo allows a remote, authenticated attacker to disclose sensitive information, potentially leading to unauthorized data exposure.

Matomo web-application information-disclosure analytics
1t
high advisory

CVE-2026-5371: MonsterInsights WordPress Plugin Unauthorized Access Vulnerability

The MonsterInsights WordPress plugin through 10.1.2 is vulnerable to unauthorized access and data modification, allowing authenticated attackers with subscriber-level access to retrieve Google OAuth tokens and reset Google Ads integration due to missing capability checks on `get_ads_access_token()` and `reset_experience()` functions.

MonsterInsights – Google Analytics Dashboard for WordPress wordpress plugin analytics oauth googleads CVE-2026-5371
2r 2t 1c