Input validation vulnerability in Analytify – Google Analytics Dashboard For WordPress 4.2.3

The Analytify plugin for WordPress has a security issue in versions up to and including 4.2.3. This issue makes it possible for unauthenticated attackers to log out an associated Google Analytics account. This can be done either by the attacker themself or by sending a false request that tricks a site administrator into clicking a link or taking some other action. This is possible because the plugin does not use nonce validation or check capabilities on the logout() function.