Codepress Visitor Statistics
7 CVEs affecting Codepress Visitor Statistics. Latest disclosed: 2024-03-17. Critical: 2, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-0600 | Critical | 9.8 | 2023-05-15 | The WP Visitor Statistics (Real Time Traffic) WordPress plugin before 6.9 does not escape user input which is concatenated to an SQL query, allowing unauthenti… |
CVE-2022-33965 | Critical | 9.3 | 2022-07-25 | Multiple Unauthenticated SQL Injection (SQLi) vulnerabilities in Osamaesh WP Visitor Statistics plugin <= 5.7 at WordPress. |
CVE-2022-0410 | High | 8.8 | 2022-03-07 | The WP Visitor Statistics (Real Time Traffic) WordPress plugin before 5.6 does not sanitise and escape the id parameter before using it in a SQL statement via… |
CVE-2021-24750 | High | 8.8 | 2021-12-21 | The WP Visitor Statistics (Real Time Traffic) WordPress plugin before 4.8 does not properly sanitise and escape the refUrl in the refDetails AJAX action, avail… |
CVE-2022-4656 | Medium | 5.4 | 2023-02-13 | The WP Visitor Statistics (Real Time Traffic) WordPress plugin before 6.5 does not validate and escape one of its shortcode attributes, which could allow users… |
CVE-2021-25042 | Medium | 5.4 | 2022-02-28 | The WP Visitor Statistics (Real Time Traffic) WordPress plugin before 5.5 does not have authorisation and CSRF checks in the updateIpAddress AJAX action, allow… |
CVE-2024-24867 | Medium | 5.3 | 2024-03-17 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Osamaesh WP Visitor Statistics (Real Time Traffic).This issue affects WP Visitor St… |