burstbv
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Burst Statistics – Privacy-Friendly WordPress Analytics (Google Analytics Alternative) | 3 | – | May 14, 2026 |
| Burst Statistics – Simple WordPress Analytics (Google Analytics Alternative) | 1 | – | Oct 3, 2026 |
Exploited and recent CVEs
- CVE-2026-97343 Burst Statistics <= 3.7.1 - Improper Authentication to Account Persistence via Share-Link Authentication Bypass via 'burst_share_token' 0.3%
- CVE-2026-8181 Burst Statistics 3.4.0 - 3.4.1.1 - Authentication Bypass to Admin Account Takeover 14.6%
- CVE-2024-1894 Burst Statistics – Privacy-Friendly Analytics for WordPress <= 1.5.6.1 - Authenticated(Contributor+) Stored Cross-Site Scripting via burst_total_pageviews_count 0.5%
- CVE-2024-0405 Burst Statistics Really Simple Plugins <= 1.5.3 - Authenticated (Editor+) SQL Injection 0.6%