CVE-2025-3953

Summary

CVE-2025-3953 is a vulnerability affecting the WP Statistics – The Most Popular Privacy-Friendly Analytics Plugin for WordPress. This issue allows authenticated attackers with Subscriber-level access or higher to bypass capability checks on the 'optionUpdater' function, enabling them to modify arbitrary plugin settings. Versions up to and including 14.13.3 are vulnerable to this unauthorized data modification. This weakness poses a security risk, as attackers can alter settings to gain unintended access or functionality. Users are encouraged to update to the latest plugin version to mitigate this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.