CVE-2024-0250 Scanner
CVE-2024-0250 Scanner - Open Redirect vulnerability in Analytics Insights for Google Analytics
Used 2.6k times · 5.9k assets checked · url
CVE
CVE-2024-0250
6.1
CVSSmedium
Exploitable remotely over the internet · no authentication required · user interaction needed.
Description
The Analytics Insights for Google Analytics 4 (AIWP) WordPress plugin before 6.3 is vulnerable to Open Redirect due to insufficient validation on the redirect oauth2callback.php file. This makes it possible for unauthenticated attackers to redirect users to potentially malicious sites if they can successfully trick them into performing an action.
Attack Vector
Network
Privileges Req.
None
User Interaction
Required
analytics insights for google analytics 4 (aiwp)
Updated Sep 26, 2026View on NVD →
S4E scanner
CVE history: analytics insights for google analytics 4 (aiwp)
Predict next CVE date with AIMonitor this CVE on your assets
S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.
Create a free account →