Report: CVE-2026-3570 - Smarter Analytics <= 2.0 - missing authorization to unauthenticated plugin settin...

Report: CVE-2026-3570 - Smarter Analytics <= 2.0 - missing authorization to unauthenticated plugin settin...

CVE ID :CVE-2026-3570 Published : March 21, 2026, 4:17 a.m. | 2 hours, 12 minutes ago Description :The Smarter Analytics plugin for WordPress is vulnerable to unauthorized access in all versions up to, and including, 2.0. This is due to missing authentication and capability checks on the configuration reset functionality in the global scope of smarter-analytics.php. This makes it possible for unauthenticated attackers to reset all plugin configuration and delete all per-page/per-post analytics settings via the 'reset' parameter. Severity: 5.3 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE Details

Severity
MEDIUM
Published
March 21, 2026
Affected Product: WordPress