WordPress plugin WP Online Users Stats SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection vulnerabili...

CVE-2025-32603: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in HK WP Online Users Stats wp-online-users-stats allows Blind SQL Injection.This issue affects WP Online Users Stats: from n/a through = 1.0.0...

CVE-2025-32678

Cross-Site Request Forgery CSRF vulnerability in Ashish Ajani WP Show Stats wp-show-stats allows Cross Site Request Forgery.This issue affects WP Show Stats: from n/a through = 1.5...

CVE-2025-32678 WordPress WP Show Stats plugin <= 1.5 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Ashish Ajani WP Show Stats wp-show-stats allows Cross Site Request Forgery.This issue affects WP Show Stats: from n/a through = 1.5...

CVE-2025-32678

CVE-2025-32678 is a CSRF in the WordPress plugin WP Show Stats, affecting versions up to 1.5 (noted as from n/a through 1.5). The entry specifies a Cross-Site Request Forgery vulnerability with a CVSS v3.1 base score of 4.3 (Medium) and does not provide details on patch/version that fixes it. The...

CVE-2025-32678: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Ashish Ajani WP Show Stats wp-show-stats allows Cross Site Request Forgery.This issue affects WP Show Stats: from n/a through = 1.5...

WordPress plugin WP Show Stats 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

PT-2025-15822 · WordPress · Wp Show Stats

Name of the Vulnerable Software and Affected Versions: Ashish Ajani WP Show Stats versions n/a through 1.5 Description: A Cross-Site Request Forgery CSRF issue allows unauthorized actions to be performed on behalf of a user. This issue affects the WP Show Stats plugin, enabling Cross Site Request...

SUSE CVE-2025-21973

In the Linux kernel, the following vulnerability has been resolved: eth: bnxt: fix kernel panic in the bnxtgetqueuestatsrx | tx When qstats-get operation is executed, callbacks of netdevstatsops are called. The bnxtgetqueuestatsrx | tx collect per-queue stats from swstats in the rings. But rx | t...

CVE-2025-30559

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PluginsPoint Kento WordPress Stats kento-wp-stats allows Stored XSS.This issue affects Kento WordPress Stats: from n/a through = 1.1...

CVE-2025-21973 eth: bnxt: fix kernel panic in the bnxt_get_queue_stats{rx | tx}

In the Linux kernel, the following vulnerability has been resolved: eth: bnxt: fix kernel panic in the bnxtgetqueuestatsrx | tx When qstats-get operation is executed, callbacks of netdevstatsops are called. The bnxtgetqueuestatsrx | tx collect per-queue stats from swstats in the rings. But rx | t...

CVE-2025-21973

CVE-2025-21973 affects the bnxt Ethernet driver (bnxt_get_queue_stats_rx/tx) in the Linux kernel. If an interface is down, qstats-get may access cp_ring/tx_ring without null checks, causing a NULL pointer dereference and kernel panic. Reproducer steps are provided in the description. The issue ha...

CVE-2025-30559

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PluginsPoint Kento WordPress Stats kento-wp-stats allows Stored XSS.This issue affects Kento WordPress Stats: from n/a through = 1.1...

CVE-2025-30559

CVE-2025-30559 is an XSS in Kento WordPress Stats (stored XSS). Description confirms Cross-site Scripting due to improper input handling during web page generation. Affected: Kento WordPress Stats plugin (WordPress). No public details on exploited versions, root cause specifics beyond input neutr...

CVE-2025-30559 WordPress Kento WordPress Stats plugin <= 1.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PluginsPoint Kento WordPress Stats kento-wp-stats allows Stored XSS.This issue affects Kento WordPress Stats: from n/a through = 1.1...

CVE-2025-30559 WordPress Kento WordPress Stats plugin <= 1.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PluginsPoint Kento WordPress Stats kento-wp-stats allows Stored XSS.This issue affects Kento WordPress Stats: from n/a through = 1.1...

CVE-2025-30559: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PluginsPoint Kento WordPress Stats kento-wp-stats allows Stored XSS.This issue affects Kento WordPress Stats: from n/a through = 1.1...

WordPress plugin Kento WordPress Stats 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

WordPress Kento WordPress Stats plugin <= 1.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Abdi Pranata in WordPress Plugin Kento WordPress Stats versions = 1.1...

PT-2025-27974

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A memory leak issue has been identified in the Linux kernel, specifically in the wifi: ath12k module. The issue occurs due to multiple allocations of rx stats when the same station is...