Read the docs

Analytify

Records14All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high6CVSS 7.0–8.9

Exploited now

Analytify records in CISA KEV

No Analytify vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Analytify - Google Analytics Dashboard 11 records MEDIUM

Records

14 records

TI-2023-22119 CVE-2023-41695 · GHSA-c37r-7mg5-gpf7

WordPress Analytify plugin <= 5.1.0 - Broken Access Control vulnerability

Priority LOW 39

Missing Authorization vulnerability in Adnan Analytify wp-analytify allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Analytify: from n/a through <= 5.1.0.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00553 Published 2024-12-13 No fix listed CWE-862
TI-2025-19689 CVE-2025-26773 · GHSA-v2jq-794f-f847

WordPress Analytify plugin <= 5.5.0 - Broken Access Control vulnerability

Priority LOW 38

Missing Authorization vulnerability in Adnan Analytify wp-analytify allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Analytify: from n/a through <= 5.5.0.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00333 Published 2025-02-17 No fix listed CWE-862
TI-2026-27136 CVE-2026-34904 · GHSA-jp4w-vjf8-5c76

WordPress Simple Social Media Share Buttons plugin <= 6.2.0 - Cross Site Request Forgery (CSRF) vulnerability

Priority LOW 34

Cross-Site Request Forgery (CSRF) vulnerability in Analytify Simple Social Media Share Buttons allows Cross Site Request Forgery.This issue affects Simple Social Media Share Buttons: from n/a through 6.2.0.

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.00124 Published 2026-04-07 No fix listed CWE-352
TI-2026-27128 CVE-2026-34896 · GHSA-q26f-fvh3-5p4h

Cross-site request forgery in Analytify Under Construction, Coming Soon & Maintenance Mode

Priority LOW 34

Cross-Site Request Forgery (CSRF) vulnerability in Analytify Under Construction, Coming Soon & Maintenance Mode allows Cross Site Request Forgery.This issue affects Under Construction, Coming Soon & Maintenance Mode: fro…

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.00124 Published 2026-04-07 No fix listed CWE-352
TI-2025-11492 CVE-2025-12521 · GHSA-8hhj-9c46-c8mp

Analytify Pro <= 7.0.3 - Unauthenticated Information Exposure

Priority LOW 30

The Analytify Pro plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 7.0.3 via the Analytify Tag HTML details.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00273 Published 2025-10-31 No fix listed CWE-200
TI-2024-01478 CVE-2024-1584 · GHSA-q69q-p8m9-5wq7

Analytify <= 5.2.1 - Missing Authorization to Unauthenticated Google Analytics Tracking ID Modification

Priority LOW 30

The Analytify – Google Analytics Dashboard For WordPress (GA4 analytics made easy) plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'wpa_check_authenticatio…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00435 Published 2024-05-02 No fix listed CWE-284
TI-2024-36012 CVE-2024-53814 · GHSA-4hpq-5jrv-896m

WordPress Analytify plugin <= 5.4.3 - Broken Access Control vulnerability

Priority LOW 29

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Adnan Analytify wp-analytify.This issue affects Analytify: from n/a through <= 5.4.3.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00454 Published 2024-12-09 No fix listed CWE-497
TI-2024-01685 CVE-2024-1809 · GHSA-g629-p7x4-5x6r

Analytify – Google Analytics Dashboard For WordPress (GA4 analytics made easy) <= 5.2.3 - Missing Authorization

Priority LOW 24

The Analytify – Google Analytics Dashboard For WordPress (GA4 analytics made easy) plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on AJAX functions in combination with…

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00291 Published 2024-05-02 No fix listed CWE-497
TI-2025-22167 CVE-2025-30897 · GHSA-xpxj-fcm9-9v47

WordPress Analytify plugin <= 5.5.1 - Settings Change vulnerability

Priority LOW 20

Missing Authorization vulnerability in Adnan Analytify wp-analytify allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Analytify: from n/a through <= 5.5.1.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00335 Published 2025-03-27 No fix listed CWE-862
TI-2023-25949 CVE-2023-47841 · GHSA-prw6-8j25-rxh9

WordPress Analytify plugin <= 5.1.1 - Broken Access Control vulnerability

Priority LOW 20

Missing Authorization vulnerability in Analytify Analytify allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Analytify: from n/a through 5.1.1.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00372 Published 2024-12-09 No fix listed CWE-862
Open these records in search →