codepress Vulnerabilities and Affected Products
Vulnerabilities associated with visitor_statistics.
Products
Clear product- Visitor Traffic Real Time Statistics Pro2 vulnerabilities
- visitor_statistics2 vulnerabilities
- Admin Columns1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2023-0600CRITICAL | WP Visitor Statistics (Real Time Traffic) < 6.9 - Unauthenticated SQLiThe WP Visitor Statistics (Real Time Traffic) WordPress plugin before 6.9 does not escape user input which is concatenated to an SQL query, allowing unauthenticated visitors to conduct SQL Injection attacks. | CVSS9.8v3.1 | EPSS4.23% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware use1 Nuclei template | STIX |
CVE-2021-24750HIGH | WP Visitor Statistics (Real Time Traffic) < 4.8 - Subscriber+ SQL InjectionThe WP Visitor Statistics (Real Time Traffic) WordPress plugin before 4.8 does not properly sanitise and escape the refUrl in the refDetails AJAX action, available to any authenticated user, which could allow users with a role as low as subscriber to perform SQL injection attacks | CVSS8.8v3.1 | EPSS38.3% | PoCs2 | SignalsNot listed in CISA KEVNo known ransomware use1 Nuclei template | STIX |