Newstatpress Project

10 CVEs across 1 Newstatpress Project products. Browse Newstatpress Project vulnerabilities, severities, and proof-of-concept exploits.

Newstatpress Project products with known CVEs

ProductCVEs
Newstatpress10
Newstatpress Project CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2017-20094Low3.52022-06-24A vulnerability, which was classified as problematic, has been found in NewStatPress Plugin 1.2.4. This issue affects some unknown processing. The manipulation…
CVE-2022-0206Medium6.12022-02-14The NewStatPress WordPress plugin before 1.3.6 does not properly escape the whatX parameters before outputting them back in attributes, leading to Reflected Cr…
CVE-2017-18575Medium6.12019-08-22The newstatpress plugin before 1.2.5 for WordPress has multiple stored XSS issues.
CVE-2015-9315Critical9.82019-08-14The newstatpress plugin before 1.0.1 for WordPress has SQL injection.
CVE-2015-9314Medium6.12019-08-14The newstatpress plugin before 1.0.4 for WordPress has XSS related to the Referer header.
CVE-2015-9313Critical9.82019-08-14The newstatpress plugin before 1.0.5 for WordPress has SQL injection related to an IMG element.
CVE-2015-9312Medium6.12019-08-14The newstatpress plugin before 1.0.5 for WordPress has XSS related to an IMG element.
CVE-2015-9311Medium6.12019-08-14The newstatpress plugin before 1.0.6 for WordPress has reflected XSS.
CVE-2015-40632015-05-27Cross-site scripting (XSS) vulnerability in includes/nsp_search.php in the NewStatPress plugin before 0.9.9 for WordPress allows remote authenticated users to…
CVE-2015-40622015-05-27SQL injection vulnerability in includes/nsp_search.php in the NewStatPress plugin before 0.9.9 for WordPress allows remote authenticated users to execute arbit…