CVE-2025-12521: Analytify Pro <= 7.0.3 - Unauthenticated Information Exposure
The Analytify Pro plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 7.0.3 via the Analytify Tag HTML details. This makes it possible for unauthenticated attackers to extract usernames from source code. While we generally do not assign CVE IDs to username exposure issues, this vendor has specifically requested we consider it a vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-12521?
CVE-2025-12521 has been identified as a critical vulnerability due to its potential for sensitive information exposure.
How do I fix CVE-2025-12521?
To fix CVE-2025-12521, update the Analytify Pro plugin to the latest version above 7.0.3.
What kind of information is exposed in CVE-2025-12521?
CVE-2025-12521 exposes usernames through the source code of the Analytify Tag HTML details.
Who is affected by CVE-2025-12521?
All users of the Analytify Pro plugin for WordPress on versions up to and including 7.0.3 are affected by CVE-2025-12521.
Is authentication required to exploit CVE-2025-12521?
No, CVE-2025-12521 can be exploited by unauthenticated attackers.