Lucene search
K

19 matches found

RedhatCVE
RedhatCVE
added 2026/01/09 12:34 p.m.2 views

CVE-2023-45001

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Castos Seriously Simple Stats allows SQL Injection.This issue affects Seriously Simple Stats: from n/a through 1.5.0...

9.8CVSS8.8AI score0.00147EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2023-49323

Malicious code in bioql PyPI...

9.8CVSS9AI score0.00147EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2023-49327

Malicious code in bioql PyPI...

7.1CVSS6.9AI score0.00083EPSS
Exploits0References1
OSV
OSV
added 2024/09/24 2:15 a.m.0 views

CVE-2024-8738

The Seriously Simple Stats plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 1.6.0. This makes it possible for unauthenticated attackers to inject arbitrary web scripts i...

6.1CVSS5.9AI score
Exploits0References3
Vulnrichment
Vulnrichment
added 2024/09/24 1:56 a.m.8 views

CVE-2024-8738 Seriously Simple Stats <= 1.6.0 - Reflected Cross-Site Scripting

The Seriously Simple Stats plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 1.6.0. This makes it possible for unauthenticated attackers to inject arbitrary web scripts i...

6.1CVSS6.4AI score0.03822EPSS
Exploits0References3
Patchstack
Patchstack
added 2024/09/24 12:54 a.m.1 views

WordPress Seriously Simple Stats plugin <= 1.6.0 - Reflected Cross-Site Scripting vulnerability

Reflected Cross-Site Scripting vulnerability discovered by vgo0 in WordPress Plugin Seriously Simple Stats versions = 1.6.0...

6.1CVSS6.3AI score0.03822EPSS
Exploits0References1Affected Software1
Patchstack
Patchstack
added 2024/09/24 12:0 a.m.7 views

WordPress Seriously Simple Stats Plugin <= 1.6.0 is vulnerable to Cross Site Scripting (XSS)

Software Seriously Simple Stats Type Plugin Vulnerable versions = 1.6.0 Fixed in 1.7.0 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-8738 Patch priority Medium CVSS severity Medium 7.1 Developer Castos PSID f8f850e73781 Credits vgo0 Required...

6.1CVSS5.7AI score0.03822EPSS
Exploits0References3Affected Software1
CNNVD
CNNVD
added 2024/09/23 12:0 a.m.1 views

WordPress plugin Seriously Simple Stats 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerability...

6.1CVSS5.8AI score0.03822EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2024/09/23 12:0 a.m.1 views

PT-2024-39215 · WordPress · Seriously Simple Stats

Name of the Vulnerable Software and Affected Versions: Seriously Simple Stats plugin for WordPress versions up to, and including, 1.6.0 Description: The issue arises from the use of add query arg without proper escaping on the URL, allowing unauthenticated attackers to inject arbitrary web script...

6.1CVSS7.3AI score0.03822EPSS
Exploits0References7
NVD
NVD
added 2023/11/06 9:15 a.m.19 views

CVE-2023-45001

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Castos Seriously Simple Stats allows SQL Injection.This issue affects Seriously Simple Stats: from n/a through 1.5.0...

9.8CVSS9.8AI score0.00147EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2023/11/06 9:15 a.m.1 views

CVE-2023-45001

A vulnerability in Craig Hewitt Seriously Simple Stats seriously-simple-stats.This issue affects Seriously Simple Stats: from n/a through = 1.5.0...

9.8CVSS8.5AI score0.00147EPSS
Exploits0References3
Prion
Prion
added 2023/11/06 9:15 a.m.18 views

Sql injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Castos Seriously Simple Stats allows SQL Injection.This issue affects Seriously Simple Stats: from n/a through 1.5.0...

7.5CVSS7.8AI score0.00147EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2023/11/06 8:20 a.m.28 views

CVE-2023-45001

CVE-2023-45001 affects the WordPress plugin Seriously Simple Stats (Castos) for versions up to and including 1.5.0 . The vulnerability is an SQL Injection caused by improper neutralization of input in SQL commands, enabling an attacker to manipulate queries and potentially access or modify data. ...

9.8CVSS8.8AI score0.00147EPSS
Exploits0References1Affected Software1
CNNVD
CNNVD
added 2023/11/06 12:0 a.m.1 views

WordPress Plugin Seriously Simple Stats SQL Injection Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

9.8CVSS7.4AI score0.00147EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2023/11/06 12:0 a.m.2 views

PT-2023-29343 · Unknown · Seriously Simple Stats

Name of the Vulnerable Software and Affected Versions: Seriously Simple Stats versions 1.5.0 and earlier Description: The issue is related to an SQL Injection vulnerability due to the improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks...

9.8CVSS9AI score0.00147EPSS
Exploits0References3
CVE
CVE
added 2023/10/17 9:5 a.m.31 views

CVE-2023-45005

CVE-2023-45005 affects Castos Seriously Simple Stats plugin for WordPress (versions

7.1CVSS6.1AI score0.00083EPSS
Exploits0References1Affected Software1
CNNVD
CNNVD
added 2023/10/17 12:0 a.m.1 views

WordPress Plugin Seriously Simple Stats Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. A cross-site scripting vulnerability exists in WordPress...

7.1CVSS5.9AI score0.00083EPSS
Exploits0References2
Patchstack
Patchstack
added 2023/10/03 12:0 a.m.11 views

WordPress Seriously Simple Stats Plugin <= 1.5.0 is vulnerable to SQL Injection

Software Seriously Simple Stats Type Plugin Vulnerable versions = 1.5.0 Fixed in 1.5.1 OWASP Top 10 A1: Injection Classification SQL Injection CVE CVE-2023-45001 Patch priority Low CVSS severity Low 8.5 Developer Castos PSID 84cb56be8542 Credits Rafie Muhammad Patchstack Required privilege Podcas...

9.8CVSS6.8AI score0.00147EPSS
Exploits0References2Affected Software1
Patchstack
Patchstack
added 2023/10/03 12:0 a.m.9 views

WordPress Seriously Simple Stats Plugin <= 1.5.1 is vulnerable to Cross Site Scripting (XSS)

Software Seriously Simple Stats Type Plugin Vulnerable versions = 1.5.1 Fixed in 1.5.2 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-45005 Patch priority Medium CVSS severity Medium 7.1 Developer Castos PSID 48b02f9f86c3 Credits Rafie Muhammad...

7.1CVSS5.6AI score0.00083EPSS
Exploits0References2Affected Software1
Rows per page
Query Builder