CVE-2025-26773: WordPress Analytify plugin <= 5.5.0 - Broken Access Control vulnerability
Medium (4.3)
Sign up for FREE to recieve instant alerts about this vulnerability!
Description
Missing Authorization vulnerability in Adnan Analytify allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Analytify: from n/a through 5.5.0.
Classification
CVE ID: CVE-2025-26773
CVSS Base Severity: MEDIUM
CVSS Base Score: 4.3
CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Affected Products
Vendor: Adnan
Product: Analytify
Exploit Prediction Scoring System (EPSS)
EPSS Score: 0.04% (probability of being exploited)
EPSS Percentile: 0.11988 (how common is this exploit)
EPSS Date: 2025-03-15 (when was this score calculated)