Beveiligingsadvies

CVE-2026-16562

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-08-08 06:00:11

Laatst bijgewerkt 2026-08-10 19:45:03

Toegewezen door WPScan

CVSS-score 6.5

Status PUBLISHED

Beschrijving

The WP Statistics WordPress plugin before 14.16.10 does not perform a capability check on a set of dashboard analytics AJAX handlers, relying only on a nonce that every authenticated user holds, allowing users with Subscriber-level access and above to disclose the site's visitor analytics data.

← Alle CVE's bekijken Bekijk op cve.org ↗