PT-2024-35929 · Analytify · Analytify

Trương Hữu Phúc · Published 2024-12-09 · Updated 2025-06-09 · CVE-2024-53814

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Analytify versions prior to 5.4.4

Description The issue is related to the exposure of sensitive system information to an unauthorized control sphere. This could potentially allow unauthorized access to sensitive data.

Recommendations For versions prior to 5.4.4, update to version 5.4.4 or later to resolve the issue.

Fix

Weakness Enumeration

CWE-497

Related Identifiers

CVE-2024-53814

Affected Products

Analytify

References · 8

• https://osv.dev/vulnerability/CVE-2024-53814 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-53814 · Security Note
• https://patchstack.com/database/Wordpress/Plugin/wp-analytify/vulnerability/wordpress-analytify-plugin-5-4-3-broken-access-control-vulnerability?_s_id=cve · Note
• https://twitter.com/CVEnew/status/1866124561152123170 · Twitter Post
• https://t.me/cvenotify/125146 · Telegram Post
• https://t.me/cvenotify/103525 · Telegram Post
• https://patchstack.com/database/wordpress/plugin/wp-analytify/vulnerability/wordpress-analytify-plugin-5-4-3-broken-access-control-vulnerability?_s_id=cve · Note
• https://t.me/cvedetector/12392 · Telegram Post