org.jenkins-ci.main:jenkins-test-harness (1.459), org.jenkins-ci.main:jenkins-war (1.459) +5 more potentially affected by CVE-2026-53437 via org.jenkins-ci.main:jenkins-core (1.459)

org.jenkins-ci.main:jenkins-core MAVEN version 1.459 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.459 - org.jenkins-ci.main:jenkins-war 1.459 -...

org.jenkins-ci.main:jenkins-test-harness (1.459), org.jenkins-ci.main:jenkins-war (1.459) +5 more potentially affected by CVE-2026-53438 via org.jenkins-ci.main:jenkins-core (1.459)

org.jenkins-ci.main:jenkins-core MAVEN version 1.459 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.459 - org.jenkins-ci.main:jenkins-war 1.459 -...

PT-2026-43537

The GoStats for WordPress plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.4. This is due to missing or incorrect nonce validation on the gostats manage function. This makes it possible for unauthenticated attackers to update the plugin's...

CVE-2026-5464: Missing Authorization

The ExactMetrics – Google Analytics Dashboard for WordPress Website Stats Plugin plugin for WordPress is vulnerable to unauthorized arbitrary plugin installation and activation in all versions up to, and including, 9.1.2. This is due to the reports page exposing the 'onboardingkey' transient to a...

org.jenkins-ci.main:jenkins-test-harness (1.459), org.jenkins-ci.main:jenkins-war (1.459) +5 more potentially affected by CVE-2025-67636 via org.jenkins-ci.main:jenkins-core (1.459)

org.jenkins-ci.main:jenkins-core MAVEN version 1.459 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.459 - org.jenkins-ci.main:jenkins-war 1.459 -...

CVE-2025-13513

The Clik stats plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the $SERVER'PHPSELF' parameter in all versions up to, and including, 0.8 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web...

CVE-2025-13513

The Clik stats plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the $SERVER'PHPSELF' parameter in all versions up to, and including, 0.8 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web...

CVE-2025-13513 Clik stats <= 0.8 - Reflected Cross-Site Scripting via $_SERVER['PHP_SELF']

The Clik stats plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the $SERVER'PHPSELF' parameter in all versions up to, and including, 0.8 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web...

CVE-2025-13513

CVE-2025-13513 refers to the WordPress plugin Clik stats, where versions up to and including 0.8 are vulnerable to Reflected Cross-Site Scripting via the $_SERVER['PHP_SELF'] parameter due to insufficient input sanitization and output escaping. The vulnerability can allow unauthenticated attacker...

org.jenkins-ci.main:jenkins-test-harness (1.459), org.jenkins-ci.main:jenkins-war (1.459) +5 more potentially affected by CVE-2025-59475 via org.jenkins-ci.main:jenkins-core (1.459)

org.jenkins-ci.main:jenkins-core MAVEN version 1.459 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.459 - org.jenkins-ci.main:jenkins-war 1.459 -...

Missing Authorization

Overview org.jenkins-ci.plugins:global-build-stats is a global-build-stats plugin Affected versions of this package are vulnerable to Missing Authorization via the REST API endpoints, which do not perform permission checks. An attacker can enumerate graph IDs by sending requests with only...

CVE-2025-58459

The Jenkins global-build-stats Plugin (version 322.v22f4db_18e2dd and earlier) is vulnerable to an authorization bypass because it fails to perform necessary permission checks on its REST API endpoints . This flaw allows attackers with Overall/Read permissions to enumerate graph IDs and access in...

CVE-2025-58459

Jenkins global-build-stats Plugin 322.v22f4db18e2dd and earlier does not perform permission checks in its REST API endpoints, allowing attackers with Overall/Read permission to enumerate graph IDs...

PT-2025-36621

Jenkins global-build-stats Plugin 322.v22f4db 18e2dd and earlier does not perform permission checks in its REST API endpoints, allowing attackers with Overall/Read permission to enumerate graph IDs. This has been patched in version 347.v32a eb 0493c4f...

CVE-2025-58459: Improper Access Control

Jenkins global-build-stats Plugin 322.v22f4db18e2dd and earlier does not perform permission checks in its REST API endpoints, allowing attackers with Overall/Read permission to enumerate graph IDs...

CVE-2015-10001

The WP-Stats WordPress plugin before 2.52 does not have CSRF check when saving its settings, and did not escape some of them when outputting them, allowing attacker to make logged in high privilege users change them and set Cross-Site Scripting payloads...

WordPress plugin WP Show Stats has a vulnerability related to cross-site request forgeing attacks.

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

org.jenkins-ci.main:jenkins-test-harness (1.459), org.jenkins-ci.main:jenkins-war (1.459) +5 more potentially affected by CVE-2025-27622 via org.jenkins-ci.main:jenkins-core (1.459)

org.jenkins-ci.main:jenkins-core MAVEN version 1.459 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.459 - org.jenkins-ci.main:jenkins-war 1.459 -...

org.jenkins-ci.main:jenkins-test-harness (1.459), org.jenkins-ci.main:jenkins-war (1.459) +5 more potentially affected by CVE-2025-27623 via org.jenkins-ci.main:jenkins-core (1.459)

org.jenkins-ci.main:jenkins-core MAVEN version 1.459 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.459 - org.jenkins-ci.main:jenkins-war 1.459 -...

org.jenkins-ci.main:jenkins-test-harness (1.459), org.jenkins-ci.main:jenkins-war (1.459) +5 more potentially affected by CVE-2024-43044 via org.jenkins-ci.main:jenkins-core (1.459)

org.jenkins-ci.main:jenkins-core MAVEN version 1.459 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.459 - org.jenkins-ci.main:jenkins-war 1.459 -...