Input validation vulnerability in Burst & Burst Pro 1.4.6.1

A Blind SQL Injection vulnerability was introduced in the Burst statistics plugin in version 1.3.5 and fixed in version 1.5.0 (free version) and 1.5.1 (premium version). This vulnerability allows any unauthenticated user to query arbitrary information from WordPress database

Detected in:

Burst Statistics – Privacy-Friendly Analytics for WordPress fixed vulnerable versions: >= 1.4.0 <= 1.4.6.1
Burst Statistics Pro fixed vulnerable versions:
Burst Statistics Pro – Privacy-Friendly Analytics for WordPress fixed vulnerable versions: >= 1.4.0 <= 1.5.0

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

Is this information incorrect? Please leave us a message.