CVE WATCH / VULNERABILITY DETAIL
CVE-2026-124673
UNKNOWNCVSS 0NVD feed
Published 15 November 2026 · tracked since 15 November 2026
Description
The Burst Statistics WordPress plugin before 3.7.5 does not check that a reported page view belongs to published content, nor check post status before listing post titles and links in its public statistics output, allowing unauthenticated attackers to disclose the titles and permalinks of draft, pe
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog