https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 23:11:06 +0000 https://cve.radiocsirt.org/vuln/cve-2024-0405 <p><strong>Affected:</strong> burstbv Burst Statistics – Privacy-Friendly WordPress Analytics (Google Analytics Alternative)</p> <p>The Burst Statistics – Privacy-Friendly Analytics for WordPress plugin, version 1.5.3, is vulnerable to Post-Authenticated SQL Injection via multiple JSON parameters in the /wp-json/burst/v1/data/compare endpoint. Affected parameters include &#39;browser&#39;, &#39;device&#39;, &#39;page_id&#39;, &#39;page_url&#39;, &#39;platform&#39;, and &#39;referrer&#39;. This vulnerability arises due to insufficient escaping of user-supplied parameters and the lack of adequate preparation in SQL queries. As a result, authenticated attackers with editor access or higher can append additional SQL queries into existing ones, potentially leading to unauthorized access to sensitive information from the database.</p> <p><strong>Affected:</strong> burstbv Burst Statistics – Privacy-Friendly WordPress Analytics (Google Analytics Alternative)</p> <p>The Burst Statistics – Privacy-Friendly Analytics for WordPress plugin, version 1.5.3, is vulnerable to Post-Authenticated SQL Injection via multiple JSON parameters in the /wp-json/burst/v1/data/compare endpoint. Affected parameters include &#39;browser&#39;, &#39;device&#39;, &#39;page_id&#39;, &#39;page_url&#39;, &#39;platform&#39;, and &#39;referrer&#39;. This vulnerability arises due to insufficient escaping of user-supplied parameters and the lack of adequate preparation in SQL queries. As a result, authenticated attackers with editor access or higher can append additional SQL queries into existing ones, potentially leading to unauthorized access to sensitive information from the database.</p> https://cve.radiocsirt.org/vuln/cve-2024-0405