CVE-2026-15780

creationtimestamp| type| source ---|---|--- 2026-08-19 09:46:45+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mtgh5zrnfb2n 2026-08-19 11:05:37+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mtgll2is6q25 2026-08-19 11:06:12+00:00| seen|...

CVE-2026-15780

The WP Statistics – Simple, privacy-friendly Google Analytics alternative plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'utmcampaign' parameter in all versions up to, and including, 14.16.8 due to insufficient input sanitization and output escaping. This makes it...