CVE-2021-24193

Low privileged users can use the AJAX action 'cppluginsdobuttonjoblatercallback' in the Visitor Traffic Real Time Statistics WordPress plugin before 2.12, to install any plugin including a specific version from the WordPress repository, as well as activate arbitrary plugin from then blog, which...

CVE-2021-24193

Low privileged users can use the AJAX action 'cppluginsdobuttonjoblatercallback' in the Visitor Traffic Real Time Statistics WordPress plugin before 2.12, to install any plugin including a specific version from the WordPress repository, as well as activate arbitrary plugin from then blog, which...

CVE-2021-24193

CVE-2021-24193 affects the WordPress plugin “Visitor Traffic Real Time Statistics” (before 2.12). Low-privilege users can abuse the AJAX action cp_plugins_do_button_job_later_callback to install any plugin from the WordPress repository and activate arbitrary plugins on the blog, enabling attacker...