CVE-2025-22304

Summary

CVE-2025-22304 is a newly discovered vulnerability affecting the WP Visitor Statistics (Real Time Traffic) plugin for WordPress. This issue involves missing authorization, enabling unauthorized users to exploit incorrectly configured access control security levels. The vulnerability extends from all versions of the plugin up to and including 7.3. Successful exploitation could result in significant security implications, making it essential for users to install the necessary updates as soon as they become available.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.