Erwan LR (WPScan)PATCHSTACK:A3C9CD5BBB74134B002DC4B5000B1069WordPress WP Statistics Plugin < 14.0 is vulnerable to SQL Injection
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
Confidence
Low
Software
WP Statistics
Type
Plugin
Vulnerable versions
< 14.0
Fixed in
14.0
OWASP Top 10
A1: Injection
Classification
SQL Injection
CVE
CVE-2023-0955
Patch priority
Low
CVSS severity
Low (7.6)
Developer
Claim ownership
PSID
442f3d5af675
Credits
Erwan LR (WPScan)
Required privilege
Administrator
Published
28 March, 2023
Vulnerability details
Expand full details Have additional information or questions about this entry? Let us know.
Solution
This security issue has a low severity impact and is unlikely to be exploited.
Affected configurations
| Vendor | Product | Version | CPE |
|---|---|---|---|
| veronalabs | wp_statistics | * | cpe:2.3:a:veronalabs:wp_statistics:*:*:*:*:*:wordpress:*:* |
Related
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
Confidence
Low