CVE-2026-93770

Unauthenticated Cross Site Scripting XSS in WP Statistics = 14.16.13 versions...

CVE-2026-93770 WordPress WP Statistics plugin <= 14.16.13 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in WP Statistics = 14.16.13 versions...

EUVD-2026-89828

Unauthenticated Cross Site Scripting XSS in WP Statistics = 14.16.13 versions...

CVE-2026-93770

The WP Statistics WordPress plugin (versions

CVE-2026-93770 WordPress WP Statistics plugin <= 14.16.13 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in WP Statistics = 14.16.13 versions...

AlmaLinux 9.2 [TuxCare] Security Update: postgresql / postgresql-contrib / postgresql-docs / etc (ALMALINUX9.2:CLSA-2026:1769516785)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1769516785 advisory. - Missing authorization in PostgreSQL CREATE STATISTICS command allows a table owner to achieve denial of service against other CREATE...

CVE-2025-9816

CVE-2025-9816 Хранимый XSS в плагине WP-Statistics Сканер обнаружение и PoC «Плагин WP Statistics – The Most Popular Privacy-Friendly Analytics Plugin для WordPress уязвим для хранимого межсайтового скриптинга через заголовок User-Agent во всех версиях до 14.5.4 включительно из-за недостаточной...

CVE-2026-8181

Эксплойт CVE-2026-8181 Плагин Burst Statistics для WordPress — Обход аутентификации с повышением привилегий до администратора Эксплойт для CVE-2026-8181, обнаруженный Chloe Chamberland и PRISM. ⚠️ Отказ от ответственности Этот репозиторий предоставлен только для исследований и целей защиты. Автор...

CVE-2026-8181

CVE-2026-8181 — Contournement d'authentification Burst Statistics menant à la prise de contrôle du compte administrateur 📋 Informations sur la vulnérabilité Élément| Détail ---|--- CVE ID| CVE-2026-8181 Plugin| Burst Statistics – Privacy-Friendly WordPress Analytics Versions concernées| 3.4.0 –...

CVE-2026-8181

EN: Контролируемый PoC и краткие технические заметки для авторизованного тестирования безопасности обхода аутентифик...

CVE-2026-8181-Lab

CVE-2026-8181 — Лабораторная работа по обходу аутентификации Burst Statistics Локальная Docker-лаборатория для CVE-2026-8181 , обхода аутентификации в плагине WordPress Burst Statistics – Privacy-Friendly WordPress Analytics. Эта лаборатория сравнивает уязвимую версию плагина с исправленной и...

CVE-2026-8181-PoC

🚨 CVE-2026-8181 | Обход аутентификации Burst Statistics -brightgreen.svg?style=for-the-badge !CAUTION КРИТИЧЕСКОЕ ПРЕДУПРЕЖДЕНИЕ: Эта уязвимость позволяет неаутентифицированному удалённому злоумышленнику обойти аутентификацию и получить полные привилегии администратора на целевом сайте WordPress,...

CVE-2026-8181

CVE-2026-8181 Preuve de concept Recherche • Validation • Tests de sécurité "les roses sont rouges, les violettes sont bleues, je crois que je me suis chié dessus en pensant à toi. rizz" Aperçu du CVE Champ| Valeur ---|--- CVE ID| CVE-2026-8181 Type| Contournement d'authentification Impact|...

OpenAI agent breached Australian government site, took months to report it

An OpenAI agent didn’t take “no” for an answer when it encountered a government website’s access controls. It got through, prompting Australia’s Prime Minister Anthony Albanese to raise his concerns directly with OpenAI CEO Sam Altman. The BBC reports that an OpenAI agent gained unauthorized acce...

WordPress WP Statistics plugin <= 14.16.13 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Intrudify in WordPress Plugin WP Statistics versions = 14.16.13...

Home Assistant: XSS in Statistics Graph Card

Summary An authenticated party can add a malicious name to any statistics-capable entity, allowing for Cross-Site Scripting attacks against anyone who views a Statistics Graph card containing that entity, when they hover over any data point on the chart. Payload Payload triggering An alternative,...

GHSA-WX4M-69M9-GX3M Home Assistant: XSS in Statistics Graph Card

Summary An authenticated party can add a malicious name to any statistics-capable entity, allowing for Cross-Site Scripting attacks against anyone who views a Statistics Graph card containing that entity, when they hover over any data point on the chart. Payload Payload triggering An alternative,...

CVE-2026-91130

Home Assistant is open source home automation software focused on local control and privacy. Prior to 2026.7.0, the Statistics Graph card in src/components/chart/statistics-chart.ts passed entity names through getStatisticLabel and computeStateName and interpolated param.seriesName into ECharts...

CVE-2026-91130 Home Assistant: XSS in Statistics Graph Card

Home Assistant is open source home automation software focused on local control and privacy. Prior to 2026.7.0, the Statistics Graph card in src/components/chart/statistics-chart.ts passed entity names through getStatisticLabel and computeStateName and interpolated param.seriesName into ECharts...

CVE-2026-91130 Home Assistant: XSS in Statistics Graph Card

Home Assistant is open source home automation software focused on local control and privacy. Prior to 2026.7.0, the Statistics Graph card in src/components/chart/statistics-chart.ts passed entity names through getStatisticLabel and computeStateName and interpolated param.seriesName into ECharts...