wp-statistics wp statistics vulnerabilities and exploits

(subscribe to this query)

The WP Statistics plugin up to and including 12.0.9 for WordPress has XSS in the rangestart and rangeend parameters on the wps_referrers_page page.

Wp-statistics Wp Statistics

Cross-site scripting vulnerability in WP Statistics version 12.0.1 and previous versions allows remote malicious users to inject arbitrary web script or HTML via unspecified vectors.

Wp-statistics Wp Statistics

Cross-site scripting vulnerability in WP Statistics version 12.0.4 and previous versions allows remote malicious users to inject arbitrary web script or HTML via specially crafted HTTP Referer headers.

Wp Statistics Wp Statistics

Cross-site scripting vulnerability in WP Statistics version 12.0.4 and previous versions allows remote malicious users to inject arbitrary web script or HTML via unspecified vectors.

Wp-statistics Wp Statistics

The wp-statistics plugin prior to 12.0.8 for WordPress has SQL injection.

Veronalabs Wp Statistics

The WP Statistics WordPress plugin is vulnerable to SQL Injection due to insufficient escaping and parameterization of the current_page_id parameter found in the ~/includes/class-wp-statistics-hits.php file which allows attackers without authentication to inject arbitrary SQL que...

Veronalabs Wp Statistics

The WP Statistics WordPress plugin is vulnerable to SQL Injection due to insufficient escaping and parameterization of the IP parameter found in the ~/includes/class-wp-statistics-hits.php file which allows attackers without authentication to inject arbitrary SQL queries to obtai...

Veronalabs Wp Statistics

The WP Statistics WordPress plugin is vulnerable to Cross-Site Scripting due to insufficient escaping and sanitization of the IP parameter found in the ~/includes/class-wp-statistics-ip.php file which allows malicious users to inject arbitrary web scripts onto several pages that ...

Veronalabs Wp Statistics

WordPress version 4.8 + contains a Cross Site Scripting (XSS) vulnerability in plugins.php or core wordpress on delete function that can result in An attacker can perform client side attacks which could be from stealing a cookie to code injection. This attack appear to be exploit...

Veronalabs Wp Statistics

The WP Statistics WordPress plugin is vulnerable to SQL Injection due to insufficient escaping and parameterization of the exclusion_reason parameter found in the ~/includes/class-wp-statistics-exclusion.php file which allows attackers without authentication to inject arbitrary S...

Veronalabs Wp Statistics

1 2 3 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook