| 2026-10-21 |
WPSEC-2026-1347 |
Burst Statistics <= 3.7.2 - Authenticated (Share-Link Viewer) Missing Authorization to Non-Shared Statistics Data via REST Data Type Override |
Medium 4.3 |
3.7.3 |
| 2026-10-21 |
WPSEC-2026-1346 |
Burst Statistics <= 3.7.2 - Authenticated (Share-Link Viewer) Missing Authorization to Non-Shared Statistics Data via Report Share Links |
Medium 4.3 |
3.7.3 |
| 2026-10-02 |
WPSEC-2026-0252 |
Burst Statistics – Privacy-Friendly WordPress Analytics (Google Analytics Alternative) <= 3.7.1 - Authenticated (Share-Link Viewer) Insufficient Session Expiration via Viewer Account Profile Update |
Medium 4.3 |
3.7.2 |
| 2026-10-01 |
WPSEC-2026-0191 |
Burst Statistics – Privacy-Friendly WordPress Analytics (Google Analytics Alternative) <= 3.7.0 - Authenticated (Share-Link Viewer) Missing Authorization to Non-Shared Statistics Data via AJAX REST Fallback |
Medium 4.3 |
3.7.1 |
