CVE-2025-26773: WordPress Analytify plugin <= 5.5.0 - Broken Access Control vulnerability
Missing Authorization vulnerability in Adnan Analytify wp-analytify allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Analytify: from n/a through <= 5.5.0.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
wordpress/analytify/wp-analytifyto a version that resolves this vulnerability.Fixed in 5.5.0
Event History
Frequently Asked Questions
What is the severity of CVE-2025-26773?
CVE-2025-26773 is classified as a high severity vulnerability due to its potential to exploit incorrectly configured access control security levels.
How do I fix CVE-2025-26773?
To fix CVE-2025-26773, update the Analytify plugin to the latest version beyond 5.5.0 that addresses the missing authorization issue.
What kind of vulnerability is CVE-2025-26773?
CVE-2025-26773 is a missing authorization vulnerability in the Adnan Analytify plugin.
Which versions of Analytify are affected by CVE-2025-26773?
CVE-2025-26773 affects all versions of Analytify from n/a up to and including version 5.5.0.
Who is at risk from CVE-2025-26773?
Users of the Analytify plugin and WordPress sites utilizing versions up to 5.5.0 are at risk from CVE-2025-26773.