293 matches found
WP Slimstat <= 4.1.5.2 - Referer Header Cross-Site Scripting (XSS)
The Slimstat Analytics WordPress plugin was affected by a Referer Header Cross-Site Scripting XSS security vulnerability...
WordPress Slimstat Plugin <= 4.1.5.2 - Cross Site Scripting
This plugin is prone to a referer header cross site scripting vulnerability. Solution Update the plugin...
WordPress SlimStat Plugin <= 2.8.4 - Cross Site Scripting
This plugin is prone to a cross site scripting vulnerability via wp-content/plugins/wp-slimstat/admin/view/panel1.php s parameter. Solution Update the plugin...
WordPress Slimstat Plugin <= 3.9.5 - SQL Injections
This plugin is prone to weak cryptographic keys leading to SQL injections. Solution Update the plugin...
WordPress SlimStat Ex Plugin - Arbitrary File Creation
This plugin is prone to an open flash chart arbitrary file creation vulnerability. Solution Update the plugin...
WordPress SlimStat Ex Plugin - Arbitrary File Creation
This plugin is prone to an open flash chart arbitrary file creation vulnerability. Solution Update the plugin...
WordPress plugin WP Slimstat 'wp-admin/admin.php' cross-site scripting vulnerability
WordPress is a blogging platform developed using the PHP language that allows users to set up their weblogs on servers that support PHP and MySQL databases. A cross-site scripting vulnerability exists in the WordPress plugin WP Slimstat 'wp-admin/admin.php', which can be exploited by an attacker ...
Popular Wordpress Analytics plugins-WP-Slimstat weak key and the sql injection vulnerability analysis-vulnerability warning-the black bar safety net
! /Article/UploadPic/2015-2/2 0 1 5 2 2 6 1 1 4 2 5 0 6 4 5. png Web Security enterprise Sucuri Tuesday in a blog post said that they in the latest version of Wordpress Analytics plugins-WP-Slimstat found in asql injectionvulnerabilities, exploit the vulnerability, an attacker can perform sql bli...
WordPress Plugin WP Slimstat Weak Encryption Vulnerability
WordPress is a blogging platform developed using the PHP language that allows users to set up their weblogs on servers that support PHP and MySQL databases. A weak encryption vulnerability exists in the WordPress plugin WP Slimstat, allowing attackers to obtain sensitive information...
WordPress Slimstat Plugin SQL Injection
An SQL injection vulnerability has been reported in Wordpress Slimstat Plugin. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...
WordPress Sites Vulnerable to Plugin-Related SQL Attacks
More than one million WordPress sites may be vulnerable to a critical plugin issue that could open sites up to SQL injection attacks and in turn, total takeover. The problem stems from a weak key vulnerability in WP-Slimstat, a web analytics plugin for the content management system that’s been...
WordPress Analytics Plugin Leaves 1.3 Million Sites Vulnerable to Hackers
A critical vulnerability has been discovered in one of the most popular plugins of the the WordPress content management platform that puts more than one Million websites at risks of being completely hijacked by the attackers. The vulnerability actually resides in most versions of a WordPress plug...
WP Slimstat <= 3.9.5 - Weak Cryptographic Keys Leading to SQL Injections
The Slimstat Analytics WordPress plugin was affected by a Weak Cryptographic Keys Leading to SQL Injections security vulnerability...
CVE-2015-1204
Cross-site scripting XSS vulnerability in the Save Filters functionality in the WP Slimstat plugin before 3.9.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the fsresource parameter in the wp-slim-view-2 page to wp-admin/admin.php...
Cross site scripting
Cross-site scripting XSS vulnerability in the Save Filters functionality in the WP Slimstat plugin before 3.9.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the fsresource parameter in the wp-slim-view-2 page to wp-admin/admin.php...
CVE-2015-1204
Cross-site scripting XSS vulnerability in the Save Filters functionality in the WP Slimstat plugin before 3.9.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the fsresource parameter in the wp-slim-view-2 page to wp-admin/admin.php...
CVE-2015-1204
Summary: WP Slimstat for WordPress is affected by a Cross-Site Scripting (XSS) vulnerability in the Save Filters functionality. The issue allows an attacker to inject arbitrary script or HTML via the fs[resource] parameter on the wp-slim-view-2 page (to wp-admin/admin.php). Affected versions: bef...
WordPress Slimstat Plugin <= 3.9.1 - XSS
This vulnerability is in the Save Filters functionality. It allows the attackers to inject arbitrary web script or HTML via the "fsresource" parameter. Solution Update the plugin...
PT-2015-5162
Name of the Vulnerable Software and Affected Versions WP Slimstat plugin versions prior to 3.9.2 Description A cross-site scripting XSS issue exists in the Save Filters functionality of the WP Slimstat plugin. This allows remote attackers to inject arbitrary web script or HTML via the fsresource...
CVE-2015-1204: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the Save Filters functionality in the WP Slimstat plugin before 3.9.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the fsresource parameter in the wp-slim-view-2 page to wp-admin/admin.php...