CVE-2026-8181

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

May 14, 2026

Last Seen

May 15, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical Auth Bypass in Burst Statistics Plugin Enables Admin Takeover72.0

Hackers are exploiting a critical authentication bypass vulnerability in the Burst Statistics WordPress plugin, tracked as CVE-2026-8181. This flaw, introduced in version 3.4.0 and persisting in 3.4.1, affects approximately 200,000 WordPress sites. Discovered by Wordfence, the vulnerability allows u...