CVE-2022-38137

The Analytify plugin for WordPress through version 4.2.2 fails to properly validate nonces on the analytify_delete_cache action, allowing unauthenticated attackers to execute cross-site request forgery attacks that delete the plugin's cache. An attacker can exploit this vulnerability by crafting a malicious request and deceiving an administrative user into accessing it, resulting in cache deletion without the admin's knowledge or consent.

Based on public CVE data (MITRE/NVD).