Wise Analytics

Wise Analytics has one disclosed vulnerability in the WordSec catalog, all reported in 2026; it is fixed as of September 2026. Their average CVSS score is 5.3, and the most serious one scores 5.3 out of 10.

The most common weakness is Missing Authorization, behind 1 of the records (100%).

The one issue recorded for Wise Analytics has a vendor fix available, so running the current release closes it.

All of these findings were reported by Lior Yeshayahu. Wise Analytics is installed on roughly 50 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.9.7.

Strategic Overview

Avg CVSSMedium
5.3/ 10
Patch Coverage100%
Open

0

Fixed

1

Get automatic notifications for all Wise Analytics vulnerabilities before they are exploited.

Highest severity on recordCVSS 5.3CVE-2025-14609

Wise Analytics <= 1.1.9 - Missing Authorization to Unauthenticated Arbitrary Analytics Database Disclosure via 'name' Parameter

Read the full analysis

Vulnerability Records

1 records
Wise Analytics banner
Latestv1.1.20

Wise Analytics

Marcin

Author

Marcin

5.0(3)
100/100
Last Updated
2026-01-25 (8mo ago)
Active Installs
50+
Downloads
2,771
Requires WP
6.2.0+
Requires PHP
7.4.0+
Tested up to
WP 6.9.7
Created
2024-05-21 (2y ago)

Wise Analytics is a fully fledged site statistics plugin that helps to track the behavior of visitors, measure the traffic sources and actions taken on your website. The plugin provides a platform to analyze the traffic visualized as tables and charts. It is easy to set up and configure. Our development team is constantly working on new features and supporting the existing ones. We believe that the statistics should be neither collected nor processed outside your server. With Wise Analytics you can have such level of privacy. Then you may learn your visitors and improve your site or business to earn more. Read More Source code on GitHub List of features: Tracking visitors, visits, the behaviour, page views and other actions Integration with Contact Form 7 (a visitor sends a form -> Wise Analytics recognizes all future actions of the visitor -> all actions are then assigned to e-mail address of the visitor) Tracking traffic sources (Referral, Social Networks, Search Engines, Direct, Paid Traffic) Detecting devices, languages, screens Visitors behaviour: pages stats, entry pages, exit pages Hourly visits in visitors’ local time Tracking WordPress log-in event Visitor profile page (name, e-mail, language, screen size, device, last visit, hourly activity, full actions log, etc.) Top visited pages Full visitors table with average visit time Filtering by dates range

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C