Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
wp statistics vulnerabilities and exploits
(subscribe to this query)
4.3
CVSSv2
CVE-2022-27231
Cross-site scripting vulnerability exists in WP Statistics versions before 13.2.0 because it improperly processes a platform parameter. By exploiting this vulnerability, an arbitrary script may be executed on the web browser of the user who is logging in to the website using the ...
Veronalabs Wp Statistics
4.3
CVSSv2
CVE-2022-1005
The WP Statistics WordPress plugin prior to 13.2.2 does not sanitise the REQUEST_URI parameter before outputting it back in the rendered page, leading to Cross-Site Scripting (XSS) in web browsers which do not encode characters
Veronalabs Wp Statistics
6.5
CVSSv2
CVE-2022-0410
The WP Visitor Statistics (Real Time Traffic) WordPress plugin prior to 5.6 does not sanitise and escape the id parameter before using it in a SQL statement via the refUrlDetails AJAX action, available to any authenticated user, leading to a SQL injection
Wp Visitor Statistics Project Wp Visitor Statistics
3.5
CVSSv2
CVE-2021-25042
The WP Visitor Statistics (Real Time Traffic) WordPress plugin prior to 5.5 does not have authorisation and CSRF checks in the updateIpAddress AJAX action, allowing any authenticated user to call it, or make a logged in user do it via a CSRF attack and add an arbitrary IP address...
Plugins-market Wp Visitor Statistics \\(real Time Traffic\\)
4.3
CVSSv2
CVE-2022-25306
The WP Statistics WordPress plugin is vulnerable to Cross-Site Scripting due to insufficient escaping and sanitization of the browser parameter found in the ~/includes/class-wp-statistics-visitor.php file which allows malicious users to inject arbitrary web scripts onto several p...
Veronalabs Wp Statistics
4.3
CVSSv2
CVE-2022-25307
The WP Statistics WordPress plugin is vulnerable to Cross-Site Scripting due to insufficient escaping and sanitization of the platform parameter found in the ~/includes/class-wp-statistics-hits.php file which allows malicious users to inject arbitrary web scripts onto several pag...
Veronalabs Wp Statistics
5
CVSSv2
CVE-2022-25149
The WP Statistics WordPress plugin is vulnerable to SQL Injection due to insufficient escaping and parameterization of the IP parameter found in the ~/includes/class-wp-statistics-hits.php file which allows attackers without authentication to inject arbitrary SQL queries to obtai...
Veronalabs Wp Statistics
5
CVSSv2
CVE-2022-25148
The WP Statistics WordPress plugin is vulnerable to SQL Injection due to insufficient escaping and parameterization of the current_page_id parameter found in the ~/includes/class-wp-statistics-hits.php file which allows attackers without authentication to inject arbitrary SQL que...
Veronalabs Wp Statistics
4.3
CVSSv2
CVE-2022-25305
The WP Statistics WordPress plugin is vulnerable to Cross-Site Scripting due to insufficient escaping and sanitization of the IP parameter found in the ~/includes/class-wp-statistics-ip.php file which allows malicious users to inject arbitrary web scripts onto several pages that ...
Veronalabs Wp Statistics
5
CVSSv2
CVE-2022-0651
The WP Statistics WordPress plugin is vulnerable to SQL Injection due to insufficient escaping and parameterization of the current_page_type parameter found in the ~/includes/class-wp-statistics-hits.php file which allows attackers without authentication to inject arbitrary SQL q...
Veronalabs Wp Statistics
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
SSTI
CVE-2024-35863
CVE-2024-35910
man-in-the-middle
CVE-2024-35912
CVE-2024-25742
LFI
CVE-2024-32002
CVE-2024-22120
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
NEXT »