VulnCheck KEV: CVE-2021-24750

The WP Visitor Statistics Real Time Traffic WordPress plugin before 4.8 does not properly sanitise and escape the refUrl in the refDetails AJAX action, available to any authenticated user, which could allow users with a role as low as subscriber to perform SQL injection attacks...

PT-2021-16251 · WordPress · Wp Visitor Statistics

Name of the Vulnerable Software and Affected Versions: WP Visitor Statistics Real Time Traffic versions prior to 4.8 Description: The issue arises from the improper sanitization and escaping of the refUrl in the refDetails AJAX action, which is accessible to any authenticated user. This could all...