Lucene search
PRIOn knowledge basePRION:CVE-2022-0651HistoryFeb 24, 2022 - 7:15 p.m.
Sql injection
2022-02-2419:15:00
PRIOn knowledge base
www.prio-n.com
5
The WP Statistics WordPress plugin is vulnerable to SQL Injection due to insufficient escaping and parameterization of the current_page_type parameter found in the ~/includes/class-wp-statistics-hits.php file which allows attackers without authentication to inject arbitrary SQL queries to obtain sensitive information, in versions up to and including 13.1.5.
| CPE | Name | Operator | Version |
|---|---|---|---|
| wp_statistics | le | 13.1.5 |
Related
nvd
nvd
CVE-2022-0651
2022-02-24 19:15:09
cve
cve
CVE-2022-0651
2022-02-24 19:15:09
wpvulndb
wpvulndb
patchstack
patchstack
nuclei
nuclei
WordPress Plugin WP Statistics <= 13.1.5 - SQL Injection
2023-10-17 07:20:28
cvelist
cvelist
openvas
openvas
WordPress WP Statistics Plugin < 13.1.6 Multiple Vulnerabilities
2022-03-08 00:00:00