PT-2026-147680

CVE-2026-124671

·

Published

2026-11-15

·

Updated

2026-11-15

Description by

Score
N/A
Not available

No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.

The Burst Statistics WordPress plugin before 3.7.5 does not enforce a shared report's date range on the analytics it serves to the report's share link, allowing anyone holding the link to read the report's statistics for any period the site retains rather than the period the report was shared for.
Exploitability
Exploit
Vendors
Affected products
Related identifiers
CVE-2026-124671
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com