CVE-2022-25149

🗓️ 24 Feb 2022 18:27:08Reported by WordfenceType

cve🔗 web.nvd.nist.gov👁 121 Views🌐 WEB

WP Statistics WordPress plugin SQL Injection vulnerability in IP paramete

Reporter	Title	Published	Views	Family All 13
CNNVD	WordPress SQL注入漏洞	24 Feb 202200:00	–	cnnvd
CNVD	WordPress WP Statistics plugin SQL注入漏洞	25 Feb 202200:00	–	cnvd
Check Point Advisories	SQL Servers Time-based SQL Injection (CVE-2011-4710; CVE-2019-13978; CVE-2019-16065; CVE-2019-16119; CVE-2019-16383; CVE-2019-16692; CVE-2020-15468; CVE-2020-26518; CVE-2020-29284; CVE-2021-21915; CVE-2021-21916; CVE-2021-21917; CVE-2022-23337; CVE-2022-25149)	26 May 201400:00	–	checkpoint_advisories
Cvelist	CVE-2022-25149 WP Statistics <= 13.1.5 Unauthenticated Blind SQL Injection via IP	24 Feb 202218:27	–	cvelist
Nuclei	WordPress Plugin WP Statistics <= 13.1.5 - SQL Injection	23 Jul 202603:49	–	nuclei
NVD	CVE-2022-25149	24 Feb 202219:15	–	nvd
OpenVAS	WordPress WP Statistics Plugin < 13.1.6 Multiple Vulnerabilities	8 Mar 202200:00	–	openvas
OSV	CVE-2022-25149	24 Feb 202219:15	–	osv
Patchstack	WordPress WP Statistics plugin <= 13.1.5 - Unauthenticated Blind SQL Injection (SQLi) vulnerability	16 Feb 202200:00	–	patchstack
Prion	Sql injection	24 Feb 202219:15	–	prion

NVD

Vulners

Node

veronalabs wp_statisticsRange≤13.1.5wordpress

[
  {
    "product": "WP Statistics",
    "vendor": "WP Statistics",
    "versions": [
      {
        "lessThanOrEqual": "13.1.5",
        "status": "affected",
        "version": "13.1.5",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
gist	www.gist.github.com/Xib3rR4dAr/5dbd58b7f57a5037fe461fba8e696042
plugins	www.plugins.trac.wordpress.org/changeset
wordfence	www.wordfence.com/vulnerability-advisories/

Parameter	Position	Path	Description	CWE
ip	query param	includes/class-wp-statistics-hits.php	SQL Injection via unsafely parameterized IP value in WP Statistics plugin (vulnerable up to 13.1.5)	CWE-89

17 Jun 2026 04:33Current

8High risk

Vulners AI Score8

CVSS 25

CVSS 3.17.5 - 9.8

EPSS0.77956

SSVC

CWE-89