https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T06:40:30.738707+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2026-32219 cnvd-2026-32219 2026-10-08T06:40:30.782999+00:00 cnvd-2026-32219 https://cve.radiocsirt.org/vuln/euvd-2026-350811 EUVD-2026-350811 2026-10-08T06:40:30.783044+00:00 EUVD-2026-350811 https://cve.radiocsirt.org/vuln/fkie_cve-2026-16562 fkie_cve-2026-16562 2026-10-08T06:40:30.783065+00:00

The WP Statistics WordPress plugin before 14.16.10 does not perform a capability check on a set of dashboard analytics AJAX handlers, relying only on a nonce that every authenticated user holds, allowing users with Subscriber-level access and above to disclose the site's visitor analytics data.

 https://cve.radiocsirt.org/vuln/ghsa-vvrr-6wxv-c229 GHSA-vvrr-6wxv-c229 2026-10-08T06:40:30.783108+00:00

The WP Statistics WordPress plugin before 14.16.10 does not perform a capability check on a set of dashboard analytics AJAX handlers, relying only on a nonce that every authenticated user holds, allowing users with Subscriber-level access and above to disclose the site's visitor analytics data.