彙總 analytify 相關全部產品的 CVE 與安全漏洞情報，包括 CVSS、EPSS、公開時間與漏洞情報資料。
歷史漏洞主要涉及 CSRF 等安全問題，並影響 軟體部署與生產負載 相關場景。
相關漏洞資料主要來源於公開漏洞披露與安全公告，可用於評估歷史漏洞暴露面與修補優先順序。
| CVE | 摘要 | 來源 | 最高 CVSS | EPSS % | 公開時間 | 更新時間 |
|---|---|---|---|---|---|---|
| CVE-2025-30897 | Missing Authorization vulnerability in Adnan Analytify wp-analytify allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Analytify: from n/a through <= 5.5.1. | [email protected] | 4.3 | 0.37% | 2025-03-27 | 2026-04-23 |
| CVE-2025-26773 | Missing Authorization vulnerability in Adnan Analytify wp-analytify allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Analytify: from n/a through <= 5.5.0. | [email protected] | 4.3 | 0.05% | 2025-02-17 | 2026-04-23 |
| CVE-2022-45830 | Missing Authorization vulnerability in Analytify.This issue affects Analytify: from n/a through 4.2.3. | [email protected] | 6.5 | 0.36% | 2025-01-02 | 2025-06-05 |
| CVE-2023-41695 | Missing Authorization vulnerability in Adnan Analytify wp-analytify allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Analytify: from n/a through <= 5.1.0. | [email protected] | 3.5 | 0.44% | 2024-12-13 | 2026-04-29 |
| CVE-2024-53814 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Adnan Analytify wp-analytify.This issue affects Analytify: from n/a through <= 5.4.3. | [email protected] | 6.5 | 0.82% | 2024-12-09 | 2026-04-23 |
| CVE-2023-47841 | Missing Authorization vulnerability in Analytify Analytify allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Analytify: from n/a through 5.1.1. | [email protected] | 4.3 | 0.34% | 2024-12-09 | 2026-04-28 |
| CVE-2024-43265 | Cross-Site Request Forgery (CSRF) vulnerability in Analytify.This issue affects Analytify: from n/a through 5.3.1. | [email protected] | 4.3 | 0.12% | 2024-08-26 | 2024-09-12 |
| CVE-2024-35689 | Cross-Site Request Forgery (CSRF) vulnerability in Analytify.This issue affects Analytify: from n/a through 5.2.3. | [email protected] | 5.4 | 0.09% | 2024-06-08 | 2024-11-21 |
| CVE-2024-1809 | The Analytify – Google Analytics Dashboard For WordPress (GA4 analytics made easy) plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on AJAX functions in combination with nonce leakage in all versions up to, and including, 5.2.3. This makes it possible for authenticated attackers, with subscriber access and higher, to obtain certain sensitive information related to plugin settings. | [email protected] | 5.4 | 0.15% | 2024-05-02 | 2026-04-08 |
| CVE-2024-1584 | The Analytify – Google Analytics Dashboard For WordPress (GA4 analytics made easy) plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'wpa_check_authentication' function in all versions up to, and including, 5.2.1. This makes it possible for unauthenticated attackers to modify the site's Google Analytics tracking ID. | [email protected] | 5.3 | 0.21% | 2024-05-02 | 2026-04-08 |
| CVE-2022-38137 | Cross-Site Request Forgery (CSRF) vulnerability in Analytify plugin <= 4.2.2 on WordPress. | [email protected] | 4.3 | 0.11% | 2022-11-08 | 2024-11-21 |