Lucene search
+L

3039 matches found

NVD
NVD
added 2025/01/07 11:15 a.m.9 views

CVE-2025-22304

Missing Authorization vulnerability in osama.esh WP Visitor Statistics Real Time Traffic wp-stats-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Visitor Statistics Real Time Traffic: from n/a through = 7.5...

4.3CVSS0.00323EPSS
SaveExploits0References1
CVE
CVE
added 2025/01/07 10:48 a.m.50 views

CVE-2025-22304

CVE-2025-22304 is a Missing Authorization vulnerability in the WP Visitor Statistics (Real Time Traffic) WordPress plugin. The Red Hat/Wordfence references identify an unauthenticated access issue that could allow unauthorized actions or data access; CVSSv3.1 base score 4.3 (Medium) with network ...

4.3CVSS7.2AI score0.00323EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/01/07 10:48 a.m.11 views

CVE-2025-22304 WordPress WP Visitor Statistics plugin <= 7.5 - Broken Access Control vulnerability

Missing Authorization vulnerability in osama.esh WP Visitor Statistics Real Time Traffic wp-stats-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Visitor Statistics Real Time Traffic: from n/a through = 7.5...

4.3CVSS7.2AI score0.00323EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/01/07 12:0 a.m.9 views

PT-2025-4419 · WordPress · Wp Visitor Statistics

Name of the Vulnerable Software and Affected Versions: WP Visitor Statistics Real Time Traffic versions n/a through 7.3 Description: The issue is related to a missing authorization vulnerability in WP Visitor Statistics Real Time Traffic, which allows exploitation of incorrectly configured access...

4.3CVSS7.1AI score0.00323EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2025/01/07 12:0 a.m.7 views

WordPress plugin WP Visitor Statistics 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exist...

4.3CVSS8.1AI score0.00323EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2025/01/06 1:23 p.m.9 views

WordPress WP Visitor Statistics plugin <= 7.5 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Dhabaleshwar Das Patchstack Alliance in WordPress Plugin WP Visitor Statistics Real Time Traffic versions = 7.5...

4.3CVSS7AI score0.00323EPSS
SaveExploits0Affected Software1
ATTACKERKB
ATTACKERKB
added 2025/01/06 11:15 a.m.10 views

CVE-2024-21464

Memory corruption while processing IPA statistics, when there are no active clients registered...

8.4CVSS5.8AI score0.00147EPSS
SaveExploits0References2
NVD
NVD
added 2025/01/06 11:15 a.m.21 views

CVE-2024-21464

Memory corruption while processing IPA statistics, when there are no active clients registered...

8.4CVSS0.00147EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/01/06 10:33 a.m.19 views

CVE-2024-21464 Buffer Copy Without Checking Size of Input in Data Network Stack & Connectivity

Memory corruption while processing IPA statistics, when there are no active clients registered...

8.4CVSS7.2AI score0.00147EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/01/06 12:0 a.m.10 views

Qualcomm Chipsets 安全漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that stems from a memory corruption that can occur when processing IPA statistics when no active client is registered...

8.4CVSS6.7AI score0.00147EPSS
SaveExploits0References1
NVD
NVD
added 2025/01/02 12:15 p.m.13 views

CVE-2024-56250

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Greg Ross Just Writing Statistics just-writing-statistics allows SQL Injection.This issue affects Just Writing Statistics: from n/a through = 4.7...

7.6CVSS0.00431EPSS
SaveExploits0References1
NVD
NVD
added 2025/01/02 12:15 p.m.10 views

CVE-2023-47557

Missing Authorization vulnerability in wp-buy Visitors Traffic Real Time Statistics visitors-traffic-real-time-statistics allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Visitors Traffic Real Time Statistics: from n/a through = 7.2...

4.3CVSS0.00362EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/01/02 12:1 p.m.20 views

CVE-2024-56250 WordPress Just Writing Statistics plugin <= 4.7 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Greg Ross Just Writing Statistics just-writing-statistics allows SQL Injection.This issue affects Just Writing Statistics: from n/a through = 4.7...

7.6CVSS0.00431EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/01/02 12:1 p.m.6 views

CVE-2024-56250 WordPress Just Writing Statistics plugin <= 4.7 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Greg Ross Just Writing Statistics just-writing-statistics allows SQL Injection.This issue affects Just Writing Statistics: from n/a through = 4.7...

7.6CVSS7.3AI score0.00431EPSS
SaveExploits0References1
CVE
CVE
added 2025/01/02 12:1 p.m.50 views

CVE-2024-56250

CVE-2024-56250 concerns the WordPress plugin Just Writing Statistics (vulnerable up to 4.7). The issue is described as an SQL Injection caused by improper neutralization of input in SQL commands, enabling attacker-controlled input to affect database queries. Public references (Red Hat and Wordfen...

7.6CVSS7.3AI score0.00431EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/01/02 12:0 a.m.5 views

WordPress plugin Just Writing Statistics SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection vulnerabili...

7.6CVSS8.8AI score0.00431EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/01/01 12:0 a.m.9 views

PT-2025-40065

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The adapter-chan stats array within the mwifiex module is not properly initialized to zero, potentially leading to an information leak. The array is allocated using vmalloc, which does n...

7.1CVSS7.1AI score0.00152EPSS
SaveExploits0
Patchstack
Patchstack
added 2024/12/30 4:21 p.m.10 views

WordPress Just Writing Statistics plugin <= 4.7 - SQL Injection vulnerability

SQL Injection vulnerability discovered by l8BL Patchstack Alliance in WordPress Plugin Just Writing Statistics versions = 4.7...

7.6CVSS8.1AI score0.00431EPSS
SaveExploits0Affected Software1
VulnCheck KEV
VulnCheck KEV
added 2024/12/16 12:0 a.m.5 views

VulnCheck KEV: CVE-2020-25206

The web console for Mimosa B5, B5c, and C5x firmware through 2.8.0.2 allows authenticated command injection in the Throughput, WANStats, PhyStats, and QosStats API classes. An attacker with access to a web console account may execute operating system commands on affected devices by sending...

9CVSS5.9AI score0.05312EPSS
SaveExploits1References1
OSV
OSV
added 2024/12/06 2:33 p.m.14 views

CLSA-2024-1733483945 Fix of 9 CVEs

CVE-url: https://ubuntu.com/security/CVE-2024-49992 - drm: remove all control node code - drm: add managed resources tied to drmdevice - drm: Set finalkfree in drmdevalloc - drm/plane: add drmmuniversalplanealloc - drm: Handle dev-unique with drmm - drm: Use drmm for drmdevinit cleanup - drm:...

8.8CVSS7AI score0.00259EPSS
SaveExploits0References1
Rows per page
Query Builder