Lucene search
+L

197 matches found

OSV
OSV
added 2023/11/06 7:50 a.m.23 views

CVE-2022-45373 WordPress Slimstat Analytics Plugin <= 5.0.4 is vulnerable to SQL Injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Jason Crouse, VeronaLabs Slimstat Analytics allows SQL Injection.This issue affects Slimstat Analytics: from n/a through 5.0.4...

8.8CVSS7.2AI score0.00517EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2023/11/06 12:0 a.m.5 views

PT-2023-14660 · Unknown · Slimstat Analytics

Name of the Vulnerable Software and Affected Versions: Slimstat Analytics versions n/a through 5.0.4 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks. Recommendation...

9.8CVSS9.5AI score0.00517EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2023/11/06 12:0 a.m.5 views

WordPress Plugin Slimstat Analytics SQL Injection Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress Plugin Slimstat...

9.8CVSS7.7AI score0.00517EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2023/10/25 12:0 a.m.28 views

WordPress Slimstat Analytics Plugin < 5.0.10 SQLi Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wp-slimstat:slimstatanalytics"; ifdescription...

8.8CVSS7.6AI score0.00916EPSS
SaveExploits4References1
NVD
NVD
added 2023/10/20 7:15 a.m.58 views

CVE-2023-4598

The Slimstat Analytics plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and including, 5.0.9 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for...

8.8CVSS8.6AI score0.00916EPSS
SaveExploits4References3
Prion
Prion
added 2023/10/20 7:15 a.m.27 views

Sql injection

The Slimstat Analytics plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and including, 5.0.9 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for...

4CVSS6.4AI score0.00916EPSS
SaveExploits4References3Affected Software1
Vulnrichment
Vulnrichment
added 2023/10/20 6:35 a.m.12 views

CVE-2023-4598

The Slimstat Analytics plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and including, 5.0.9 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for...

8.8CVSS7.1AI score0.00916EPSS
SaveExploits4References3
CVE
CVE
added 2023/10/20 6:35 a.m.67 views

CVE-2023-4598

The CVE-2023-4598 entry affects the WordPress Slimstat Analytics plugin, with vulnerable versions up to 5.0.9. The root cause is insufficient escaping on user-supplied parameters in the plugin’s shortcode, combined with insufficient preparation of the SQL query, enabling authenticated attackers w...

8.8CVSS6.6AI score0.00916EPSS
SaveExploits4References3Affected Software1
OSV
OSV
added 2023/10/20 6:35 a.m.29 views

CVE-2023-4598 Slimstat Analytics <= 5.0.9 - Authenticated (Contributor+) Blind SQL Injection via Shortcode

The Slimstat Analytics plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and including, 5.0.9 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for...

8.8CVSS6.9AI score0.00916EPSS
SaveExploits4References5
Cvelist
Cvelist
added 2023/10/20 6:35 a.m.57 views

CVE-2023-4598 Slimstat Analytics <= 5.0.9 - Authenticated (Contributor+) Blind SQL Injection via Shortcode

The Slimstat Analytics plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and including, 5.0.9 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for...

8.8CVSS8.9AI score0.00916EPSS
SaveExploits4References3
wpexploit
wpexploit
added 2023/10/20 12:0 a.m.210 views

Slimstat Analytics < 5.0.10 - Contributor+ SQL Injection

Description The plugin is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and including, 5.0.9 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers wit...

8.8CVSS6.5AI score0.00916EPSS
SaveExploits4
WPVulnDB
WPVulnDB
added 2023/10/20 12:0 a.m.32 views

Slimstat Analytics < 5.0.10 - Contributor+ SQL Injection

Description The plugin is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and including, 5.0.9 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers wit...

8.8CVSS6.6AI score0.00916EPSS
SaveExploits4Affected Software1
Positive Technologies
Positive Technologies
added 2023/10/19 12:0 a.m.7 views

PT-2023-29779 · WordPress · Slimstat Analytics

Name of the Vulnerable Software and Affected Versions: Slimstat Analytics plugin for WordPress versions up to, and including, 5.0.9 Description: The issue is related to SQL Injection via the plugin's shortcode due to insufficient escaping on the user supplied parameter and lack of sufficient...

8.8CVSS6.8AI score0.00916EPSS
SaveExploits4References7
OpenVAS
OpenVAS
added 2023/10/02 12:0 a.m.22 views

WordPress Slimstat Analytics Plugin < 5.0.9 XSS Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wp-slimstat:slimstatanalytics"; ifdescription...

5.9CVSS5.4AI score0.00354EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2023/09/27 6:45 a.m.14 views

CVE-2023-40676 WordPress Slimstat Analytics Plugin <= 5.0.8 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Jason Crouse, VeronaLabs Slimstat Analytics plugin = 5.0.8 versions...

5.9CVSS5.5AI score0.00354EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2023/09/27 6:45 a.m.37 views

CVE-2023-40676 WordPress Slimstat Analytics Plugin <= 5.0.8 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Jason Crouse, VeronaLabs Slimstat Analytics plugin = 5.0.8 versions...

5.9CVSS5.5AI score0.00354EPSS
SaveExploits0References1
CVE
CVE
added 2023/09/27 6:45 a.m.48 views

CVE-2023-40676

The CVE-2023-40676 entry concerns the VeronaLabs Slimstat Analytics WordPress plugin. Affected software: Slimstat Analytics plugin versions

5.9CVSS5.1AI score0.00354EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2023/09/27 12:0 a.m.6 views

WordPress plugin Slimstat Analytics cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerability...

5.9CVSS6AI score0.00354EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2023/09/26 12:0 a.m.5 views

PT-2023-27594 · Veronalabs · Veronalabs Slimstat Analytics

Name of the Vulnerable Software and Affected Versions: VeronaLabs Slimstat Analytics plugin versions 5.0.8 and earlier Description: The issue is related to an Authenticated Stored Cross-Site Scripting XSS vulnerability. This means that an attacker with admin access can inject malicious scripts in...

5.9CVSS5.2AI score0.00354EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2023/09/13 12:0 a.m.8 views

WordPress plugin Slimstat Analytics SQL Injection Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection vulnerability exists i...

8.8CVSS8.1AI score0.00916EPSS
SaveExploits4References5
Rows per page
Query Builder