WP Visitor Statistics (Real Time Traffic) < 4.8 - Subscriber+ SQL Injection

The plugin does not properly sanitise and escape the refUrl in the refDetails AJAX action, available to any authenticated user, which could allow users with a role as low as subscriber to perform SQL injection attacks...

WordPress WP Visitor Statistics (Real Time Traffic) plugin <= 4.7 - SQL Injection (SQLi) vulnerability

SQL Injection SQLi vulnerability discovered by Krzysztof Zając in WordPress WP Visitor Statistics Real Time Traffic plugin versions = 4.7. Solution Update the WordPress WP Visitor Statistics Real Time Traffic plugin to the latest available version at least 4.8...

XSS Vulnerability in Ajang Cool Site Access Statistics System

Ajang Cool Site Visitor Statistics is a simple, easy-to-use site visitor statistics system. An XSS vulnerability exists in Ajang Cool Site Visitor Statistics System, which can be exploited by attackers to obtain user cookie information...

WordPress plugin Simple visitor stat has multiple cross-site scripting vulnerabilities

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports personal blog sites set up on PHP and MySQL servers.Simple visitor stat plugin for WordPress is a visitor statistics plugin. The Simple visitor stat plugin for WordPre...