CVE-2026-3570 is a missing authorization vulnerability (CWE-862) in the Smarter Analytics WordPress plugin by acumenconsulting. The issue exists in all versions up to and including 2.0, where the configuration reset functionality in smarter-analytics.php lacks authentication and capability checks. This allows unauthenticated attackers to invoke the reset parameter to erase all plugin configuration and per-page/per-post analytics data. The vulnerability is remotely exploitable without privileges or user interaction and impacts the integrity of plugin settings.

Exploitation of this vulnerability enables an unauthenticated attacker to reset all plugin configurations and delete analytics data on individual pages or posts. This results in loss of configuration integrity and analytics data but does not affect confidentiality or availability. There are no known exploits in the wild as of the published date.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider disabling or restricting access to the plugin's reset functionality or applying custom authorization checks to prevent unauthorized resets.