113 matches found
WordPress newstatpress plugin cross-site scripting vulnerability (CNVD-2019-30376)
WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. newstatpress is a plugin used in it for real-time statistics on blog visits. A cross-site scripting vulnerability exists in the...
WordPress newstatpress plugin cross-site scripting vulnerability (CNVD-2019-30373)
WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. newstatpress is a plugin used in it for real-time statistics on blog visits. A cross-site scripting vulnerability exists in the...
WordPress newstatpress plugin SQL injection vulnerability (CNVD-2019-30377)
WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. newstatpress is a plugin used in it for real-time statistics on blog visits. A SQL injection vulnerability exists in the WordPress...
WordPress newstatpress plugin cross-site scripting vulnerability (CNVD-2019-30372)
WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. newstatpress is a plugin used in it for real-time statistics on blog visits. A cross-site scripting vulnerability exists in the...
CVE-2015-9315
The newstatpress plugin before 1.0.1 for WordPress has SQL injection...
CVE-2015-9311
The newstatpress plugin before 1.0.6 for WordPress has reflected XSS...
CVE-2015-9314
The newstatpress plugin before 1.0.4 for WordPress has XSS related to the Referer header...
CVE-2015-9312
The newstatpress plugin before 1.0.5 for WordPress has XSS related to an IMG element...
CVE-2015-9313
The newstatpress plugin before 1.0.5 for WordPress has SQL injection related to an IMG element...
Sql injection
The newstatpress plugin before 1.0.5 for WordPress has SQL injection related to an IMG element...
Design/Logic Flaw
The newstatpress plugin before 1.0.5 for WordPress has XSS related to an IMG element...
Sql injection
The newstatpress plugin before 1.0.1 for WordPress has SQL injection...
Cross site request forgery (csrf)
The newstatpress plugin before 1.0.4 for WordPress has XSS related to the Referer header...
Cross site scripting
The newstatpress plugin before 1.0.6 for WordPress has reflected XSS...
CVE-2015-9311
The newstatpress plugin before 1.0.6 for WordPress has reflected XSS...
CVE-2015-9311
The CVE-2015-9311 entry concerns the WordPress plugin newstatpress prior to version 1.0.6, which is affected by a reflected XSS vulnerability. The issue is documented consistently across multiple sources (NVD, Red Hat advisory, CNVD, OpenVAS NASL entry) as an XSS in the plugin. Impact details in ...
CVE-2015-9312
CVE-2015-9312 affects the WordPress plugin NewStatPress prior to 1.0.5 (observed in templates and RedHat/NVD entries). The vulnerability is a cross-site scripting (XSS) flaw in includes/nsp_search.php where GET parameters are used unsafely, with outputs escaping issues that allow injected script....
CVE-2015-9313
CVE-2015-9313: The WordPress plugin newstatpress (before 1.0.5) is affected by an SQL injection through an IMG element. The root cause is unsafe SQL construction in the plugin’s search path (nsp_search.php), enabling an attacker to potentially disclose data (PoC shows exfiltration of user hashes)...
CVE-2015-9314
The newstatpress plugin before 1.0.4 for WordPress has XSS related to the Referer header...
CVE-2015-9314
The CVE-2015-9314 entry concerns the WordPress plugin NewStatPress, affected versions prior to 1.0.4. The vulnerability is an XSS issue tied to the Referer header, impacting the plugin’s handling of HTTP Referer data. Several connected sources corroborate the same flaw (XSS related to Referer hea...