Wp Statistics Wp Statistics
9 CVEs affecting Wp Statistics Wp Statistics. Latest disclosed: 2022-02-24. Critical: 3, High: 3.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-25149 | Critical | 9.8 | 2022-02-24 | The WP Statistics WordPress plugin is vulnerable to SQL Injection due to insufficient escaping and parameterization of the IP parameter found in the ~/includes… |
CVE-2022-25148 | Critical | 9.8 | 2022-02-24 | The WP Statistics WordPress plugin is vulnerable to SQL Injection due to insufficient escaping and parameterization of the current_page_id parameter found in t… |
CVE-2022-0651 | Critical | 9.8 | 2022-02-24 | The WP Statistics WordPress plugin is vulnerable to SQL Injection due to insufficient escaping and parameterization of the current_page_type parameter found in… |
CVE-2022-25307 | High | 7.2 | 2022-02-24 | The WP Statistics WordPress plugin is vulnerable to Cross-Site Scripting due to insufficient escaping and sanitization of the platform parameter found in the ~… |
CVE-2022-25306 | High | 7.2 | 2022-02-24 | The WP Statistics WordPress plugin is vulnerable to Cross-Site Scripting due to insufficient escaping and sanitization of the browser parameter found in the ~/… |
CVE-2022-25305 | High | 7.2 | 2022-02-24 | The WP Statistics WordPress plugin is vulnerable to Cross-Site Scripting due to insufficient escaping and sanitization of the IP parameter found in the ~/inclu… |
CVE-2017-2147 | Medium | 6.1 | 2017-04-28 | Cross-site scripting vulnerability in WP Statistics version 12.0.4 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified v… |
CVE-2017-2136 | Medium | 6.1 | 2017-04-28 | Cross-site scripting vulnerability in WP Statistics version 12.0.4 and earlier allows remote attackers to inject arbitrary web script or HTML via specially cra… |
CVE-2017-2135 | Medium | 6.1 | 2017-04-28 | Cross-site scripting vulnerability in WP Statistics version 12.0.1 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified v… |