Analytify vulnerabilities and threats

A Cross-Site Request Forgery (CSRF) vulnerability exists in the Analytify Simple Social Media Share Buttons plugin, affecting versions up to 6.2.0. This vulnerability allows an attacker to perform unauthorized actions on behalf of an authenticated user. The issue is classified under CWE-352 and has a high severity rating with a CVSS score of 7.5. No official patch or remediation guidance is currently available from the vendor. There are no known exploits in the wild at this time.

CVE-2026-34896 is a Cross-Site Request Forgery (CSRF) vulnerability affecting the Analytify Under Construction, Coming Soon & Maintenance Mode plugin up to version 2.1.1. This vulnerability allows an attacker to perform unauthorized actions on behalf of an authenticated user. The issue has a high severity score of 7.5 but currently has no publicly known exploits or official patches. Users should monitor vendor advisories for remediation updates.

The Analytify Pro plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 7.0.3 via the Analytify Tag HTML details. This makes it possible for unauthenticated attackers to extract usernames from source code. While we generally do not assign CVE IDs to username exposure issues, this vendor has specifically requested we consider it a vulnerability.