Sensitive Information Exposure in Analytify Pro Plugin for WordPress

CVE-2025-12521

What is CVE-2025-12521?

The Analytify Pro plugin for WordPress is exposed to a vulnerability that allows unauthenticated users to extract sensitive information, specifically usernames, from the source code through the Analytify Tag HTML details. This issue affects all versions up to and including 7.0.3, potentially compromising user data and site security. While username exposure generally isn't classified as a vulnerability, it has garnered specific attention due to the potential risks involved, prompting the vendor's concern and the need for vigilance.

References