Wp Statistics

10 CVEs across 2 Wp Statistics products. Browse Wp Statistics vulnerabilities, severities, and proof-of-concept exploits.

Wp Statistics products with known CVEs

ProductCVEs
Wp Statistics9
Wp Statistics3
Wp Statistics CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2022-25307High7.22022-02-24The WP Statistics WordPress plugin is vulnerable to Cross-Site Scripting due to insufficient escaping and sanitization of the platform parameter found in the ~…
CVE-2022-25306High7.22022-02-24The WP Statistics WordPress plugin is vulnerable to Cross-Site Scripting due to insufficient escaping and sanitization of the browser parameter found in the ~/…
CVE-2022-25305High7.22022-02-24The WP Statistics WordPress plugin is vulnerable to Cross-Site Scripting due to insufficient escaping and sanitization of the IP parameter found in the ~/inclu…
CVE-2022-25149Critical9.82022-02-24The WP Statistics WordPress plugin is vulnerable to SQL Injection due to insufficient escaping and parameterization of the IP parameter found in the ~/includes…
CVE-2022-25148Critical9.82022-02-24The WP Statistics WordPress plugin is vulnerable to SQL Injection due to insufficient escaping and parameterization of the current_page_id parameter found in t…
CVE-2022-0651Critical9.82022-02-24The WP Statistics WordPress plugin is vulnerable to SQL Injection due to insufficient escaping and parameterization of the current_page_type parameter found in…
CVE-2017-10991Medium6.12017-07-07The WP Statistics plugin through 12.0.9 for WordPress has XSS in the rangestart and rangeend parameters on the wps_referrers_page page.
CVE-2017-2147Medium6.12017-04-28Cross-site scripting vulnerability in WP Statistics version 12.0.4 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified v…
CVE-2017-2136Medium6.12017-04-28Cross-site scripting vulnerability in WP Statistics version 12.0.4 and earlier allows remote attackers to inject arbitrary web script or HTML via specially cra…
CVE-2017-2135Medium6.12017-04-28Cross-site scripting vulnerability in WP Statistics version 12.0.1 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified v…