CVE-2023-0600 WP Visitor Statistics (Real Time Traffic) < 6.9 - Unauthenticated SQLi

2023-05-1512:15:31

WPScan

www.cve.org

wordpress

sql injection

unauthenticated

cve-2023-0600

plugin security

0.049 Low

EPSS

Percentile

92.8%

JSON

The WP Visitor Statistics (Real Time Traffic) WordPress plugin before 6.9 does not escape user input which is concatenated to an SQL query, allowing unauthenticated visitors to conduct SQL Injection attacks.

CNA Affected

[
  {
    "vendor": "Unknown",
    "product": "WP Visitor Statistics (Real Time Traffic)",
    "versions": [
      {
        "status": "affected",
        "versionType": "custom",
        "version": "0",
        "lessThan": "6.9"
      }
    ],
    "defaultStatus": "unaffected",
    "collectionURL": "https://wordpress.org/plugins"
  }
]

References

wpscan.com/vulnerability/8f46df4d-cb80-4d66-846f-85faf2ea0ec4

0.049 Low

EPSS

Percentile

92.8%

JSON

Related for CVELIST:CVE-2023-0600