WordPress Slimstat plugin <= 4.8 - Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability

Unauthenticated Stored Cross-Site Scripting XSS vulnerability found by Antony Garand in WordPress Slimstat plugin versions = 4.8. Solution Update the WordPress Slimstat plugin to the latest available version at least 4.8.1...

CVE-2015-9273

CVE-2015-9273 affects the WordPress plugin wp-slimstat (Slimstat Analytics) , with an XSS vulnerability exploitable via an HTTP Referer header or a related JavaScript Referer tracking field. Affected versions are prior to 4.1.6.1 . The issue is documented across multiple sources confirming a stor...

CVE-2015-9273

The wp-slimstat aka Slimstat Analytics plugin before 4.1.6.1 for WordPress has XSS via an HTTP Referer header, or via a field associated with JavaScript-based Referer tracking...

Slimstat Analytics Plugin for WordPress < 4.7.1 PHP Object Injection

According to its self-reported version, the Slimstat Analytics Plugin for WordPress running on the remote web server is prior to 4.7.1. It is, therefore, affected by a PHP object injection vulnerability. An authenticated, remote attacker can exploit this issue to inject PHP objects and execute...

WP SlimStat <= 3.5.5 - Overview URI Stored XSS

The Slimstat Analytics WordPress plugin was affected by an Overview URI Stored XSS security vulnerability...

WordPress WP Slimstat 'wp-slimstat.php' plugin cross-site scripting vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports personal blog sites set up on PHP and MySQL servers.WP SlimStat is one of the real-time statistical analysis plugin. A cross-site scripting vulnerability exists in the...

WP Slimstat <= 4.1.5.2 - Referer Header Cross-Site Scripting (XSS)

The Slimstat Analytics WordPress plugin was affected by a Referer Header Cross-Site Scripting XSS security vulnerability...

WordPress Slimstat Plugin <= 4.1.5.2 - Cross Site Scripting

This plugin is prone to a referer header cross site scripting vulnerability. Solution Update the plugin...

WordPress SlimStat Plugin <= 2.8.4 - Cross Site Scripting

This plugin is prone to a cross site scripting vulnerability via wp-content/plugins/wp-slimstat/admin/view/panel1.php s parameter. Solution Update the plugin...

WordPress SlimStat Ex Plugin - Arbitrary File Creation

This plugin is prone to an open flash chart arbitrary file creation vulnerability. Solution Update the plugin...

WordPress SlimStat Ex Plugin - Arbitrary File Creation

This plugin is prone to an open flash chart arbitrary file creation vulnerability. Solution Update the plugin...

WordPress Slimstat Plugin <= 3.9.5 - SQL Injections

This plugin is prone to weak cryptographic keys leading to SQL injections. Solution Update the plugin...

WordPress plugin WP Slimstat 'wp-admin/admin.php' cross-site scripting vulnerability

WordPress is a blogging platform developed using the PHP language that allows users to set up their weblogs on servers that support PHP and MySQL databases. A cross-site scripting vulnerability exists in the WordPress plugin WP Slimstat 'wp-admin/admin.php', which can be exploited by an attacker ...

Popular Wordpress Analytics plugins-WP-Slimstat weak key and the sql injection vulnerability analysis-vulnerability warning-the black bar safety net

! /Article/UploadPic/2015-2/2 0 1 5 2 2 6 1 1 4 2 5 0 6 4 5. png Web Security enterprise Sucuri Tuesday in a blog post said that they in the latest version of Wordpress Analytics plugins-WP-Slimstat found in asql injectionvulnerabilities, exploit the vulnerability, an attacker can perform sql bli...

WordPress Slimstat Plugin SQL Injection

An SQL injection vulnerability has been reported in Wordpress Slimstat Plugin. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

WordPress Plugin WP Slimstat Weak Encryption Vulnerability

WordPress is a blogging platform developed using the PHP language that allows users to set up their weblogs on servers that support PHP and MySQL databases. A weak encryption vulnerability exists in the WordPress plugin WP Slimstat, allowing attackers to obtain sensitive information...

WordPress Sites Vulnerable to Plugin-Related SQL Attacks

More than one million WordPress sites may be vulnerable to a critical plugin issue that could open sites up to SQL injection attacks and in turn, total takeover. The problem stems from a weak key vulnerability in WP-Slimstat, a web analytics plugin for the content management system that’s been...

WordPress Analytics Plugin Leaves 1.3 Million Sites Vulnerable to Hackers

A critical vulnerability has been discovered in one of the most popular plugins of the the WordPress content management platform that puts more than one Million websites at risks of being completely hijacked by the attackers. The vulnerability actually resides in most versions of a WordPress plug...

WP Slimstat <= 3.9.5 - Weak Cryptographic Keys Leading to SQL Injections

The Slimstat Analytics WordPress plugin was affected by a Weak Cryptographic Keys Leading to SQL Injections security vulnerability...

CVE-2015-1204

Cross-site scripting XSS vulnerability in the Save Filters functionality in the WP Slimstat plugin before 3.9.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the fsresource parameter in the wp-slim-view-2 page to wp-admin/admin.php...