Known vulnerabilities in Analytify – Google Analytics Dashboard For WordPress (GA4 analytics tracking)

Analytify is the must-have Plugin for Google Analytics 4 Integration, Tracking, & Reporting in WordPress. Enhanced eCommerce, Events, & Call Analytics

11Reported vulnerabilities

8.8Highest CVSS score

9.1.2Latest version

20,000+Active installs

What to do now

Update Analytify – Google Analytics Dashboard For WordPress (GA4 analytics tracking) to 6.0.0 or later. 11 of these have a fixed version available. Updating resolves them.

Plugin last updated: August 17, 2026 / Tested up to WordPress: 7.0.4 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVE	Severity	Exploit probability next 30 days	Affected versions	Fixed in	Published
CVE-2022-38137	High 8.8	0.3%	Before 4.2.3	`4.2.3`	November 8, 2022
WF-b899ca76-d6f4-4369-8f66-738b144433b7	Medium 6.5	—	4.2.2 and earlier	`4.2.3`	August 22, 2022
WF-27cfd3cd-e622-4be7-af47-84324d6f6ea3	Medium 6.1	—	4.2.0 and earlier	`4.2.1`	June 20, 2022
CVE-2025-30897	Medium 4.3	0.3%	5.5.1 and earlier	`6.0.0`	March 27, 2025
CVE-2025-26773	Medium 4.3	0.3%	5.5.0 and earlier	`5.5.1`	February 14, 2025
CVE-2024-53814	Medium 4.3	0.4%	5.4.3 and earlier	`5.5.0`	December 2, 2024
CVE-2024-43265	Medium 4.3	0.2%	5.3.1 and earlier	`5.4.0`	August 12, 2024
CVE-2024-35689	Medium 4.3	0.2%	5.2.3 and earlier	`5.2.4`	June 6, 2024
CVE-2023-47841	Medium 4.3	0.4%	5.1.1 and earlier	`5.2.0`	November 20, 2023
CVE-2023-41695	Medium 4.3	0.5%	Before 5.1.1	`5.1.1`	September 5, 2023
CVE-2022-45830	Medium 4.3	0.4%	4.2.3 and earlier	`4.3.0`	January 3, 2023

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.