https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T12:05:36.391616+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2024-0405 CVE-2024-0405 — Burst Statistics Really Simple Plugins <= 1.5.3 - Authenticated (Editor+) SQL Injection 2026-10-09T12:05:36.392712+00:00

Affected: burstbv Burst Statistics – Privacy-Friendly WordPress Analytics (Google Analytics Alternative)

The Burst Statistics – Privacy-Friendly Analytics for WordPress plugin, version 1.5.3, is vulnerable to Post-Authenticated SQL Injection via multiple JSON parameters in the /wp-json/burst/v1/data/compare endpoint. Affected parameters include 'browser', 'device', 'page_id', 'page_url', 'platform', and 'referrer'. This vulnerability arises due to insufficient escaping of user-supplied parameters and the lack of adequate preparation in SQL queries. As a result, authenticated attackers with editor access or higher can append additional SQL queries into existing ones, potentially leading to unauthorized access to sensitive information from the database.