CVE-2017-20094

CVE-2017-20094 affects the WordPress plugin NewStatPress 1.2.4. The vulnerability is described as a basic persistent cross-site scripting (XSS) issue that can be exploited remotely. Upgrading to version 1.2.5 addresses the issue. Some connected sources also indicate that a PoC exists (Exploitatio...

CVE-2022-0206

The NewStatPress WordPress plugin before 1.3.6 does not properly escape the whatX parameters before outputting them back in attributes, leading to Reflected Cross-Site Scripting issues...

CVE-2022-0206

The NewStatPress WordPress plugin before 1.3.6 does not properly escape the whatX parameters before outputting them back in attributes, leading to Reflected Cross-Site Scripting issues...

WordPress newstatpress plugin cross-site scripting vulnerability (CNVD-2019-30374)

WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. newstatpress is a plugin used in it for real-time statistics on blog visits. A cross-site scripting vulnerability exists in the...

CVE-2017-18575

The newstatpress plugin before 1.2.5 for WordPress has multiple stored XSS issues...

CVE-2017-18575

The newstatpress plugin before 1.2.5 for WordPress has multiple stored XSS issues...

CVE-2017-18575

The newstatpress plugin before 1.2.5 for WordPress has multiple stored XSS issues...

WordPress newstatpress plugin SQL injection vulnerability (CNVD-2019-30377)

WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. newstatpress is a plugin used in it for real-time statistics on blog visits. A SQL injection vulnerability exists in the WordPress...

WordPress newstatpress plugin cross-site scripting vulnerability (CNVD-2019-30372)

WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. newstatpress is a plugin used in it for real-time statistics on blog visits. A cross-site scripting vulnerability exists in the...

CVE-2015-9311

The newstatpress plugin before 1.0.6 for WordPress has reflected XSS...

CVE-2015-9312

The newstatpress plugin before 1.0.5 for WordPress has XSS related to an IMG element...

CVE-2015-9314

The newstatpress plugin before 1.0.4 for WordPress has XSS related to the Referer header...

CVE-2015-9313

The newstatpress plugin before 1.0.5 for WordPress has SQL injection related to an IMG element...

Sql injection

The newstatpress plugin before 1.0.5 for WordPress has SQL injection related to an IMG element...

Cross site scripting

The newstatpress plugin before 1.0.6 for WordPress has reflected XSS...

Sql injection

The newstatpress plugin before 1.0.1 for WordPress has SQL injection...

Cross site request forgery (csrf)

The newstatpress plugin before 1.0.4 for WordPress has XSS related to the Referer header...

CVE-2015-9313

CVE-2015-9313: The WordPress plugin newstatpress (before 1.0.5) is affected by an SQL injection through an IMG element. The root cause is unsafe SQL construction in the plugin’s search path (nsp_search.php), enabling an attacker to potentially disclose data (PoC shows exfiltration of user hashes)...

CVE-2015-9314

The newstatpress plugin before 1.0.4 for WordPress has XSS related to the Referer header...

CVE-2015-9315

The CVE-2015-9315 entry concerns the WordPress plugin NewStatPress , affected versions before 1.0.1 . According to the sources, this plugin contains an SQL injection vulnerability, enabling an attacker to potentially read or modify data associated with the site via a vulnerable input path. The CV...