Analytify

Analytify develops a Google Analytics dashboard plugin that integrates analytics functionality into web applications, placing it in a position to mediate access to sensitive analytics data and user information. The vendor's vulnerability profile centers on a narrow product scope and recurs through access-control and authorization weaknesses—including missing authorization checks, cross-site request forgery, and improper access control—alongside exposure of sensitive system information, reflecting the challenges of securing multi-tenant analytics platforms where authorization boundaries are critical. A meaningful share of the vendor's disclosures reach serious severity; current exploitation activity and severity counts are shown alongside this summary.