Unauthorized Data Modification Vulnerability in WP Statistics by WordPress

CVE-2025-3953

What is CVE-2025-3953?

The WP Statistics plugin for WordPress is susceptible to unauthorized data modifications due to a missing capability check in the 'optionUpdater' function. This issue affects all versions up to and including 14.13.3, allowing authenticated users, particularly those with Subscriber-level access and above, to alter arbitrary settings within the plugin. This vulnerability can lead to significant issues in plugin functionality and data integrity. It is crucial for website administrators to update the plugin and restrict user permissions to safeguard against potential exploitation.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References