https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 10:06:16 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-289149 EUVD-2026-289149 https://cve.radiocsirt.org/vuln/euvd-2026-289149 https://cve.radiocsirt.org/vuln/fkie_cve-2024-0405 <p>The Burst Statistics – Privacy-Friendly Analytics for WordPress plugin, version 1.5.3, is vulnerable to Post-Authenticated SQL Injection via multiple JSON parameters in the /wp-json/burst/v1/data/compare endpoint. Affected parameters include &#39;browser&#39;, &#39;device&#39;, &#39;page_id&#39;, &#39;page_url&#39;, &#39;platform&#39;, and &#39;referrer&#39;. This vulnerability arises due to insufficient escaping of user-supplied parameters and the lack of adequate preparation in SQL queries. As a result, authenticated attackers with editor access or higher can append additional SQL queries into existing ones, potentially leading to unauthorized access to sensitive information from the database.</p> <p>The Burst Statistics – Privacy-Friendly Analytics for WordPress plugin, version 1.5.3, is vulnerable to Post-Authenticated SQL Injection via multiple JSON parameters in the /wp-json/burst/v1/data/compare endpoint. Affected parameters include &#39;browser&#39;, &#39;device&#39;, &#39;page_id&#39;, &#39;page_url&#39;, &#39;platform&#39;, and &#39;referrer&#39;. This vulnerability arises due to insufficient escaping of user-supplied parameters and the lack of adequate preparation in SQL queries. As a result, authenticated attackers with editor access or higher can append additional SQL queries into existing ones, potentially leading to unauthorized access to sensitive information from the database.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-0405 https://cve.radiocsirt.org/vuln/ghsa-xhpq-8p2q-qgm6 <p>The Burst Statistics – Privacy-Friendly Analytics for WordPress plugin, version 1.5.3, is vulnerable to Post-Authenticated SQL Injection via multiple JSON parameters in the /wp-json/burst/v1/data/compare endpoint. Affected parameters include &#39;browser&#39;, &#39;device&#39;, &#39;page_id&#39;, &#39;page_url&#39;, &#39;platform&#39;, and &#39;referrer&#39;. This vulnerability arises due to insufficient escaping of user-supplied parameters and the lack of adequate preparation in SQL queries. As a result, authenticated attackers with editor access or higher can append additional SQL queries into existing ones, potentially leading to unauthorized access to sensitive information from the database.</p> <p>The Burst Statistics – Privacy-Friendly Analytics for WordPress plugin, version 1.5.3, is vulnerable to Post-Authenticated SQL Injection via multiple JSON parameters in the /wp-json/burst/v1/data/compare endpoint. Affected parameters include &#39;browser&#39;, &#39;device&#39;, &#39;page_id&#39;, &#39;page_url&#39;, &#39;platform&#39;, and &#39;referrer&#39;. This vulnerability arises due to insufficient escaping of user-supplied parameters and the lack of adequate preparation in SQL queries. As a result, authenticated attackers with editor access or higher can append additional SQL queries into existing ones, potentially leading to unauthorized access to sensitive information from the database.</p> https://cve.radiocsirt.org/vuln/ghsa-xhpq-8p2q-qgm6 https://cve.radiocsirt.org/vuln/gsd-2024-0405 gsd-2024-0405 https://cve.radiocsirt.org/vuln/gsd-2024-0405