Lucene search
Krzysztof ZającPATCHSTACK:579E4FC19E7FE9541F043F35780C0395HistoryJan 31, 2022 - 12:00 a.m.
WordPress WP Visitor Statistics (Real Time Traffic) plugin <= 5.4 - Arbitrary IP Address Exclusion to Stored Cross-Site Scripting (XSS) vulnerability
2022-01-3100:00:00
Krzysztof Zając
patchstack.com
9
wordpress
visitor statistics
xss
vulnerability
krzysztof zając
update
5.5
plugin
ip address exclusion
stored cross-site scripting
EPSS
0.001
Percentile
24.8%
Arbitrary IP Address Exclusion to Stored Cross-Site Scripting (XSS) vulnerability discovered by Krzysztof Zając in WordPress WP Visitor Statistics (Real Time Traffic) plugin (versions <= 5.4).
Solution
Update the WordPress WP Visitor Statistics (Real Time Traffic) plugin to the latest available version (at least 5.5).
Related
prion
prion
Cross site scripting
2022-02-28 09:15:00
cnvd
cnvd
wpvulndb
wpvulndb
nvd
nvd
CVE-2021-25042
2022-02-28 09:15:08
cve
cve
CVE-2021-25042
2022-02-28 09:15:08
cvelist
cvelist
wpexploit
wpexploit