Newstatpress Project Newstatpress
10 CVEs affecting Newstatpress Project Newstatpress. Latest disclosed: 2022-06-24. Critical: 2, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2015-9315 | Critical | 9.8 | 2019-08-14 | The newstatpress plugin before 1.0.1 for WordPress has SQL injection. |
CVE-2015-9313 | Critical | 9.8 | 2019-08-14 | The newstatpress plugin before 1.0.5 for WordPress has SQL injection related to an IMG element. |
CVE-2022-0206 | Medium | 6.1 | 2022-02-14 | The NewStatPress WordPress plugin before 1.3.6 does not properly escape the whatX parameters before outputting them back in attributes, leading to Reflected Cr… |
CVE-2017-18575 | Medium | 6.1 | 2019-08-22 | The newstatpress plugin before 1.2.5 for WordPress has multiple stored XSS issues. |
CVE-2015-9314 | Medium | 6.1 | 2019-08-14 | The newstatpress plugin before 1.0.4 for WordPress has XSS related to the Referer header. |
CVE-2015-9312 | Medium | 6.1 | 2019-08-14 | The newstatpress plugin before 1.0.5 for WordPress has XSS related to an IMG element. |
CVE-2015-9311 | Medium | 6.1 | 2019-08-14 | The newstatpress plugin before 1.0.6 for WordPress has reflected XSS. |
CVE-2017-20094 | Low | 3.5 | 2022-06-24 | A vulnerability, which was classified as problematic, has been found in NewStatPress Plugin 1.2.4. This issue affects some unknown processing. The manipulation… |
CVE-2015-4063 | | 2015-05-27 | Cross-site scripting (XSS) vulnerability in includes/nsp_search.php in the NewStatPress plugin before 0.9.9 for WordPress allows remote authenticated users to… | |
CVE-2015-4062 | | 2015-05-27 | SQL injection vulnerability in includes/nsp_search.php in the NewStatPress plugin before 0.9.9 for WordPress allows remote authenticated users to execute arbit… |