Extension WordPress
Vulnérabilités Burst Statistics – Simple WordPress Analytics (Google Analytics Alternative)
Cette page rassemble les failles publiées pour Burst Statistics – Simple WordPress Analytics (Google Analytics Alternative), leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Burst Statistics – Simple WordPress Analytics (Google Analytics Alternative)
5 fiches
Burst Statistics 3.4.0 – 3.4.1.1 – Authentication Bypass to Admin Account Takeover
The Burst Statistics – Privacy-Friendly WordPress Analytics (Google Analytics Alternative) plugin for WordPress is vulnerable to Authentication Bypass in versions 3.4.0 to 3.4.1.1. This is due to incorrect return-value handling in the `is_mainwp_authenticated()` function when validating application passwords…
3.4.0-3.4.1.1
3.4.2
13/05/2026
Burst Statistics <= 2.0.6 – Cross-Site Request Forgery
The Burst Statistics – Privacy-Friendly Analytics for WordPress plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.0.6. This is due to missing or incorrect nonce validation on a function. This…
*-2.0.6
2.0.8
27/06/2025
Burst Statistics – Privacy-Friendly Analytics for WordPress <= 1.5.6.1 – Authenticated(Contributor+) Stored Cross-Site Scripting via burst_total_pageviews_count
The Burst Statistics – Privacy-Friendly Analytics for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'burst_total_pageviews_count' custom meta field in all versions up to, and including, 1.5.6.1 due to insufficient input sanitization and output…
*-1.5.6.1
1.5.7
12/03/2024
Burst Statistics Really Simple Plugins <= 1.5.3 – Authenticated (Editor+) SQL Injection
The Burst Statistics – Privacy-Friendly Analytics for WordPress plugin, version 1.5.3, is vulnerable to Post-Authenticated SQL Injection via multiple JSON parameters in the /wp-json/burst/v1/data/compare endpoint. Affected parameters include 'browser', 'device', 'page_id', 'page_url', 'platform', and 'referrer'. This vulnerability arises…
*-1.5.3
1.5.4
16/01/2024
Burst Statistics – Privacy-Friendly Analytics for WordPress 1.4.0 to 1.4.6.1 – Unauthenticated SQL Injection
The Burst Statistics – Privacy-Friendly Analytics for WordPress plugin for WordPress is vulnerable to SQL Injection via the 'url' parameter in versions 1.4.0 to 1.4.6.1 (free) and versions 1.4.0 to 1.5.0 (pro) due to insufficient escaping on the…
1.4.0-1.4.6.1
1.5.0
06/12/2023
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.