Wise Analytics
Wise Analytics has one disclosed vulnerability in the WordSec catalog, all reported in 2026; it is fixed as of September 2026. Their average CVSS score is 5.3, and the most serious one scores 5.3 out of 10.
The most common weakness is Missing Authorization, behind 1 of the records (100%).
The one issue recorded for Wise Analytics has a vendor fix available, so running the current release closes it.
All of these findings were reported by Lior Yeshayahu. Wise Analytics is installed on roughly 50 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.9.7.
CVE-2025-14609Wise Analytics <= 1.1.9 - Missing Authorization to Unauthenticated Arbitrary Analytics Database Disclosure via 'name' Parameter
Read the full analysisVulnerability Records

Wise Analytics
Author
Marcin
Wise Analytics is a fully fledged site statistics plugin that helps to track the behavior of visitors, measure the traffic sources and actions taken on your website. The plugin provides a platform to analyze the traffic visualized as tables and charts. It is easy to set up and configure. Our development team is constantly working on new features and supporting the existing ones. We believe that the statistics should be neither collected nor processed outside your server. With Wise Analytics you can have such level of privacy. Then you may learn your visitors and improve your site or business to earn more. Read More Source code on GitHub List of features: Tracking visitors, visits, the behaviour, page views and other actions Integration with Contact Form 7 (a visitor sends a form -> Wise Analytics recognizes all future actions of the visitor -> all actions are then assigned to e-mail address of the visitor) Tracking traffic sources (Referral, Social Networks, Search Engines, Direct, Paid Traffic) Detecting devices, languages, screens Visitors behaviour: pages stats, entry pages, exit pages Hourly visits in visitors’ local time Tracking WordPress log-in event Visitor profile page (name, e-mail, language, screen size, device, last visit, hourly activity, full actions log, etc.) Top visited pages Full visitors table with average visit time Filtering by dates range
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C