Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: Burst-statistics Component: Burst Statistics Clear all filters
TI-2024-01763 CVE-2024-1894 · GHSA-x5qw-p9h8-m3qw

Cross-site scripting in burstbv Burst Statistics – Privacy-Friendly WordPress Analytics

Priority LOW 29

The Burst Statistics – Privacy-Friendly Analytics for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'burst_total_pageviews_count' custom meta field in all versions up to, and includi…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00512 Published 2024-03-13 No fix listed CWE-79
TI-2023-05299 CVE-2023-5761 · GHSA-38xq-8jqq-g368

SQL injection in rogierlankhorst Burst Statistics – Privacy-Friendly Analytics for…

Priority MEDIUM 43

The Burst Statistics – Privacy-Friendly Analytics for WordPress plugin for WordPress is vulnerable to SQL Injection via the 'url' parameter in versions 1.4.0 to 1.4.6.1 (free) and versions 1.4.0 to 1.5.0 (pro) due to ins…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0069 Published 2023-12-07 No fix listed CWE-89