The vulnerability CVE-2025-30897 affects the Adnan Analytify WordPress plugin up to version 5.5.1. It is due to missing authorization controls, which means that access control security levels are incorrectly configured, allowing users with limited privileges to perform unauthorized actions. The CVSS 3.1 base score is 4.3 (medium), reflecting a network attack vector with low complexity, requiring low privileges and no user interaction, resulting in no confidentiality or availability impact but some integrity impact. No patch or official fix details are available from the vendor or advisory sources.

The vulnerability allows unauthorized modification or actions within the Analytify plugin by users with limited privileges, potentially affecting data integrity. There is no evidence of confidentiality breach or denial of service. No known exploits have been reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict plugin access to trusted users only and monitor for unusual activity related to Analytify plugin usage. Avoid granting unnecessary privileges to users who can interact with this plugin.