What is CVE-2026-3570?

CVE-2026-3570 is a medium-severity vulnerability in Acumenconsulting Smarter Analytics, classified under Missing Authorization. CVSS score: 5.3/10. Published 2026-03-21.

How severe is CVE-2026-3570?

Medium severity. CVSS v3 base score is 5.3 out of 10.

Auth bypass in Acumenconsulting Smarter Analytics

CVE-2026-3570

The Smarter Analytics plugin for WordPress is vulnerable to unauthorized access in all versions up to, and including, 2.0. This is due to missing authentication and capability checks on the configuration reset functionality in the global s…

Vulnerability class: Broken Access Control

EPSS: 0.002 (41.0th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N.

Affected products

Acumenconsulting Smarter Analytics — versions 0

Weakness classification (CWE)

CWE-862 — Missing Authorization

References

www.wordfence.com/threat-intel/vulnerabilities/id/06f0d53d-734c-4cc1-902d-bdf48…
plugins.trac.wordpress.org/browser/smarter-analytics/trunk/smarter-analytics.php
plugins.trac.wordpress.org/browser/smarter-analytics/tags/2.0/smarter-analytics…

Frequently asked questions

What is CVE-2026-3570?: CVE-2026-3570 is a medium-severity vulnerability in Acumenconsulting Smarter Analytics, classified under Missing Authorization. CVSS score: 5.3/10. Published 2026-03-21.
How severe is CVE-2026-3570?: Medium severity. CVSS v3 base score is 5.3 out of 10.