Lucene search
+L

13 matches found

NVD
NVD
•added 2026/10/03 7:16 a.m.•8 views

CVE-2026-97343

The Burst Statistics – Simple WordPress Analytics Google Analytics Alternative plugin for WordPress is vulnerable to Improper Authentication leading to Account Persistence in all versions up to, and including, 3.7.1. This is due to the maybeloadshareddashboard handler issuing a genuine WordPress...

4.3CVSS0.00299EPSS
SaveExploits0References7
CVE
CVE
•added 2026/10/03 6:38 a.m.•12 views

CVE-2026-97343

The Burst Statistics – Simple WordPress Analytics plugin for WordPress is vulnerable to Improper Authentication leading to Account Persistence in all versions up to and including 3.7.1 . The issue stems from the maybe_load_shared_dashboard() handler, which issues a genuine WordPress session cooki...

4.3CVSS5.8AI score0.00299EPSS
SaveExploits0References7
EUVD
EUVD
•added 2026/10/03 6:38 a.m.•5 views

EUVD-2026-91950

The Burst Statistics – Simple WordPress Analytics Google Analytics Alternative plugin for WordPress is vulnerable to Improper Authentication leading to Account Persistence in all versions up to, and including, 3.7.1. This is due to the maybeloadshareddashboard handler issuing a genuine WordPress...

4.3CVSS5.8AI score0.00299EPSS
SaveExploits0References7
Cvelist
Cvelist
•added 2026/10/03 6:38 a.m.•15 views

CVE-2026-97343 Burst Statistics <= 3.7.1 - Improper Authentication to Account Persistence via Share-Link Authentication Bypass via 'burst_share_token'

The Burst Statistics – Simple WordPress Analytics Google Analytics Alternative plugin for WordPress is vulnerable to Improper Authentication leading to Account Persistence in all versions up to, and including, 3.7.1. This is due to the maybeloadshareddashboard handler issuing a genuine WordPress...

4.3CVSS0.00299EPSS
SaveExploits0References7
EUVD
EUVD
•added 2026/05/25 9:59 p.m.•24 views

EUVD-2026-31761

Missing Authorization vulnerability in Cornel Raiu WP Search Analytics allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects WP Search Analytics: from n/a before 1.5.0...

5.3CVSS5.8AI score0.00294EPSS
SaveExploits0References1
GithubExploit
GithubExploit
•added 2026/05/17 9:47 p.m.•250 views

Exploit for CVE-2026-8181

CVE-2026-8181 Burst Statistics | Authentication Bypass to Admi...

9.8CVSS5.8AI score0.03012EPSS
SaveExploits13
GithubExploit
GithubExploit
•added 2026/05/14 12:13 p.m.•193 views

Exploit for CVE-2026-8181

CVE-2026-8181 — Burst Statistics Authentication Bypass to Admi...

9.8CVSS5.8AI score0.03012EPSS
SaveExploits13
EUVD
EUVD
•added 2026/05/14 5:30 a.m.•20 views

EUVD-2026-30242

The Burst Statistics – Privacy-Friendly WordPress Analytics Google Analytics Alternative plugin for WordPress is vulnerable to Authentication Bypass in versions 3.4.0 to 3.4.1.1. This is due to incorrect return-value handling in the ismainwpauthenticated function when validating application...

9.8CVSS5.8AI score0.03012EPSS
SaveExploits13References10
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/14 12:00 a.m.•2 views

CVE-2026-8181: Improper Authentication

The Burst Statistics – Privacy-Friendly WordPress Analytics Google Analytics Alternative plugin for WordPress is vulnerable to Authentication Bypass in versions 3.4.0 to 3.4.1.1. This is due to incorrect return-value handling in the ismainwpauthenticated function when validating application...

9.8CVSS5.8AI score0.03012EPSS
SaveExploits13References2
CNNVD
CNNVD
•added 2026/02/20 12:00 a.m.•18 views

WordPress plugin Advanced WC Analytics 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There is...

6.5CVSS5.8AI score0.00263EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/02/20 12:00 a.m.•33 views

PT-2026-21076

Name of the Vulnerable Software and Affected Versions GA4WP: Google Analytics for WordPress versions through 2.10.0 Description An authorization issue exists in Passionate Brains GA4WP: Google Analytics for WordPress. The issue involves exploiting incorrectly configured access control security...

5.4AI score0.00255EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2025/02/14 12:44 p.m.•36 views

CVE-2025-24615 WordPress Analytics Cat Plugin <= 1.1.2 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in fatcatapps Analytics Cat analytics-cat allows Reflected XSS.This issue affects Analytics Cat: from n/a through = 1.1.2...

7.1CVSS0.00228EPSS
SaveExploits0References1
CNVD
CNVD
•added 2019/08/23 12:00 a.m.•18 views

WordPress analytics-tracker plugin cross-site scripting vulnerability

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Foundation. A cross-site scripting vulnerability exists in the WordPress analytics-tracker plugin. An attacker can exploit the vulnerability to execute client-side code...

6.1CVSS6.3AI score0.00905EPSS
SaveExploits0References1
Rows per page
Query Builder