CVE-2026-16562

CVE-2026-16562 – WP Statistics (WordPress) plugin before 14.16.10: the dashboard analytics AJAX handlers fail to perform a proper capability check, relying only on a nonce that is possessed by any authenticated user. This allows users with Subscriber-level access and higher to disclose visitor an...