Analytify Pro WordPress Plugin Sensitive Information Exposure Vulnerability

A vulnerability allowing sensitive information exposure exists in the Analytify Pro plugin for WordPress, affecting all versions through 7.0.3. The issue arises from the Analytify Tag HTML details, which unintentionally reveal usernames in the source code. This vulnerability allows unauthenticated attackers to extract these usernames. Although username exposure typically does not warrant a CVE designation, the vendor has requested that it be considered a vulnerability.

Impact

Exploitation of this vulnerability allows for the unauthorized extraction of usernames from the source code.

Remediation

Users can update to version 7.0.4 or a newer patched version to address this vulnerability.