A vulnerability was found in rchmura GoStats for WordPress Plugin up to 1.4 on WordPress. It has been declared as problematic. This impacts the function
gostats_manage of the component Setting Handler. Such manipulation leads to cross-site request forgery.
This vulnerability is traded as CVE-2026-8943. The attack may be launched remotely. There is no exploit available.