A vulnerability marked as critical has been reported in bensibley Independent Analytics Plugin up to 2.14.9 on WordPress. This impacts the function wp_safe_remote of the file /wp-json/iawp/search. Performing a manipulation results in server-side request forgery.

This vulnerability was named CVE-2026-5737. The attack may be initiated remotely. There is no available exploit.