https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T12:39:28.707066+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-16562 CVE-2026-16562 — WP Statistics < 14.16.10 - Subscriber+ Sensitive Data Disclosure via Metabox AJAX Handlers 2026-10-08T12:39:28.708185+00:00

Affected: Unknown WP Statistics

The WP Statistics WordPress plugin before 14.16.10 does not perform a capability check on a set of dashboard analytics AJAX handlers, relying only on a nonce that every authenticated user holds, allowing users with Subscriber-level access and above to disclose the site's visitor analytics data.