Cross-Site Request Forgery Vulnerability in Burst Statistics by Burst Statistics B.V.
CVE-2025-53193

4.3MEDIUM

Key Information:

Vendor

WordPress
Status
Burst Statistics
Vendor
CVE Published:
27 June 2025

What is CVE-2025-53193?

A Cross-Site Request Forgery (CSRF) vulnerability in the Burst Statistics plugin allows attackers to execute unauthorized actions on behalf of authenticated users. This weakness persists in the plugin versions up to 2.0.6, exposing users to potential exploitation if not properly mitigated. It is essential for users to monitor updates and apply necessary security measures to safeguard their systems.

Affected Version(s)

Burst Statistics 0 <= 2.0.6

References

https://patchstack.com/database/Wordpress/Plugin/burst-st...
vdb-entry

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Trương Hữu Phúc (truonghuuphuc) (Patchstack Alliance)
.