Fedora 38 : openbgpd (2023-aa47d33cc8)

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-aa47d33cc8 advisory. OpenBGPD 7.8 Improved performance by optimising the output filters Add Autonomous System Provider Authorization ASPA validaton based on...

PT-2023-16640

Name of the Vulnerable Software and Affected Versions WP Statistics WordPress plugin versions prior to 14.0 Description The issue allows authenticated users to perform SQL Injection attacks due to a parameter not being escaped. By default, the affected feature is available to users with the manag...

CVE-2023-0955: Undefined Security Weakness

The WP Statistics WordPress plugin before 14.0 does not escape a parameter, which could allow authenticated users to perform SQL Injection attacks. By default, the affected feature is available to users with the manageoptions capability admin+, however the plugin has a settings to allow low...

WordPress plugin WP Statistics SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A SQL injection vulnerability exists in the...

CVE-2022-38074

SQL Injection vulnerability in VeronaLabs WP Statistics plugin = 13.2.10 versions...

Sql injection

SQL Injection vulnerability in VeronaLabs WP Statistics plugin = 13.2.10 versions...

CVE-2022-38074 WordPress WP Statistics Plugin <= 13.2.10 is vulnerable to SQL Injection

SQL Injection vulnerability in VeronaLabs WP Statistics plugin = 13.2.10 versions...

CVE-2022-38074

CVE-2022-38074 relates to a SQL Injection vulnerability in VeronaLabs WP Statistics plugin for WordPress (versions

CVE-2022-38074: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection vulnerability in VeronaLabs WP Statistics plugin = 13.2.10 versions...

PT-2023-13582

Name of the Vulnerable Software and Affected Versions VeronaLabs WP Statistics plugin versions prior to 13.2.11 Description The issue is related to a SQL Injection vulnerability. Recommendations For versions prior to 13.2.11, update to version 13.2.11 or later to resolve the issue...

WordPress plugin WP Statistics SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress plugin WP...

WordPress WP Statistics Plugin < 13.2.11 Multiple SQLi Vulnerabilities

The WordPress plugin SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:veronalabs:wpstatistics"; ifdescription...

WordPress WP Statistics Plugin < 13.1.2 CSRF Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:veronalabs:wpstatistics"; ifdescription...

CVE-2021-4333

The WP Statistics plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 13.1.1. This is due to missing or incorrect nonce validation on the view function. This makes it possible for unauthenticated attackers to activate and deactivate arbitrary plugins...

CVE-2021-4333

The CVE-2021-4333 issue affects the WordPress WP Statistics plugin (versions up to 13.1.1;

CVE-2021-4333 WP Statistics <= 13.1.1 - Cross-Site Request Forgery to Arbitrary Plugin Activation and Deactivation

The WP Statistics plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 13.1.1. This is due to missing or incorrect nonce validation on the view function. This makes it possible for unauthenticated attackers to activate and deactivate arbitrary plugins...

CVE-2021-4333 WP Statistics <= 13.1.1 - Cross-Site Request Forgery to Arbitrary Plugin Activation and Deactivation

The WP Statistics plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 13.1.1. This is due to missing or incorrect nonce validation on the view function. This makes it possible for unauthenticated attackers to activate and deactivate arbitrary plugins...

CVE-2021-4333: Cross-Site Request Forgery (CSRF)

The WP Statistics plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 13.1.1. This is due to missing or incorrect nonce validation on the view function. This makes it possible for unauthenticated attackers to activate and deactivate arbitrary plugins...

PT-2023-12436

Name of the Vulnerable Software and Affected Versions WP Statistics plugin for WordPress versions up to, and including, 13.1.1 Description The issue is due to missing or incorrect nonce validation on the view function, making it possible for unauthenticated attackers to activate and deactivate...

WordPress plugin WP Statistics 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. Cross-site request forgery vulnerabili...