Lucene search
Muhammad Zeeshan (Xib3rR4dAr)PATCHSTACK:7B6055BBCC8FD24C241F071F8D37F3A3HistoryFeb 16, 2022 - 12:00 a.m.
WordPress WP Statistics plugin <= 13.1.5 - Unauthenticated Blind SQL Injection (SQLi) vulnerability
2022-02-1600:00:00
Muhammad Zeeshan (Xib3rR4dAr)
patchstack.com
35
0.326 Low
EPSS
Percentile
97.1%
Unauthenticated Blind SQL Injection (SQLi) vulnerability via IP discovered by Muhammad Zeeshan (Xib3rR4dAr) in WordPress WP Statistics plugin (versions <= 13.1.5).
Solution
Update the WordPress WP Statistics plugin to the latest available version (at least 13.1.6).
| CPE | Name | Operator | Version |
|---|---|---|---|
| wp statistics | le | 13.1.5 |
Related
cvelist
cvelist
nuclei
nuclei
WordPress Plugin WP Statistics <= 13.1.5 - SQL Injection
2023-10-17 07:20:28
nvd
nvd
CVE-2022-25149
2022-02-24 19:15:10
wpvulndb
wpvulndb
WP Statistics < 13.1.6 - Unauthenticated Blind SQL Injection via IP
2022-02-16 00:00:00
cve
cve
CVE-2022-25149
2022-02-24 19:15:10
prion
prion
Sql injection
2022-02-24 19:15:00
openvas
openvas
WordPress WP Statistics Plugin < 13.1.6 Multiple Vulnerabilities
2022-03-08 00:00:00
checkpoint_advisories
checkpoint_advisories