EIP-2026-114183
PRE-CVEWordPress Plugin WassUp Real Time Analytics 1.9 - Persistent Cross-Site Scripting
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-114183. PoCs published by Burak Kelebek.
AI-analyzed exploit summary This is a proof-of-concept for a stored XSS vulnerability in the WassUp Real Time Analytics WordPress Plugin. The exploit demonstrates how an unauthenticated attacker can inject malicious JavaScript code into the admin dashboard by visiting a malformed link, which executes when an admin views the 'Current Visitors' section.
Description
WordPress Plugin WassUp Real Time Analytics 1.9 - Persistent Cross-Site Scripting
Exploits (1)
This is a proof-of-concept for a stored XSS vulnerability in the WassUp Real Time Analytics WordPress Plugin. The exploit demonstrates how an unauthenticated attacker can inject malicious JavaScript code into the admin dashboard by visiting a malformed link, which executes when an admin views the 'Current Visitors' section.