Lucene search
+L

143 matches found

Cvelist
Cvelist
•added 2023/05/25 12:08 p.m.•55 views

CVE-2022-45366 WordPress Slimstat Analytics Plugin <= 5.0.4 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Jason Crouse, VeronaLabs Slimstat Analytics plugin = 5.0.4 versions...

7.1CVSS6.5AI score0.0041EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2023/05/25 12:08 p.m.•21 views

CVE-2022-45366 WordPress Slimstat Analytics Plugin <= 5.0.4 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Jason Crouse, VeronaLabs Slimstat Analytics plugin = 5.0.4 versions...

7.1CVSS5.8AI score0.0041EPSS
SaveExploits0References1
Mend
Mend
•added 2023/05/25 12:08 p.m.•6 views

CVE-2022-45366

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Jason Crouse, VeronaLabs Slimstat Analytics plugin = 5.0.4 versions...

7.1CVSS0.0041EPSS
SaveExploits0References4
CVE
CVE
•added 2023/05/25 12:08 p.m.•88 views

CVE-2022-45366

CVE-2022-45366 – WordPress Slimstat Analytics (plugin)

7.1CVSS6AI score0.0041EPSS
SaveExploits0References1Affected Software1
OSV
OSV
•added 2023/05/25 12:08 p.m.•31 views

CVE-2022-45366 WordPress Slimstat Analytics Plugin <= 5.0.4 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Jason Crouse, VeronaLabs Slimstat Analytics plugin = 5.0.4 versions...

7.1CVSS6.8AI score
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/05/25 12:00 a.m.•7 views

CVE-2022-45366: Improper Neutralization of Input During Web Page Generation

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Jason Crouse, VeronaLabs Slimstat Analytics plugin = 5.0.4 versions...

7.1CVSS5.8AI score0.0041EPSS
SaveExploits0References2
NVD
NVD
•added 2023/03/13 2:15 p.m.•42 views

CVE-2022-38074

SQL Injection vulnerability in VeronaLabs WP Statistics plugin = 13.2.10 versions...

8.8CVSS9.9AI score0.00731EPSS
SaveExploits0References1
Prion
Prion
•added 2023/03/13 2:15 p.m.•39 views

Sql injection

SQL Injection vulnerability in VeronaLabs WP Statistics plugin = 13.2.10 versions...

6.5CVSS9.1AI score0.00731EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2023/03/13 1:43 p.m.•57 views

CVE-2022-38074 WordPress WP Statistics Plugin <= 13.2.10 is vulnerable to SQL Injection

SQL Injection vulnerability in VeronaLabs WP Statistics plugin = 13.2.10 versions...

7.1CVSS10AI score0.00731EPSS
SaveExploits0References1
OSV
OSV
•added 2023/03/13 1:43 p.m.•43 views

CVE-2022-38074 WordPress WP Statistics Plugin <= 13.2.10 is vulnerable to SQL Injection

SQL Injection vulnerability in VeronaLabs WP Statistics plugin = 13.2.10 versions...

7.1CVSS7.3AI score
SaveExploits0References4
CVE
CVE
•added 2023/03/13 1:43 p.m.•72 views

CVE-2022-38074

CVE-2022-38074 relates to a SQL Injection vulnerability in VeronaLabs WP Statistics plugin for WordPress (versions

8.8CVSS9.1AI score0.00731EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2023/03/13 12:00 a.m.•6 views

PT-2023-13582

Name of the Vulnerable Software and Affected Versions VeronaLabs WP Statistics plugin versions prior to 13.2.11 Description The issue is related to a SQL Injection vulnerability. Recommendations For versions prior to 13.2.11, update to version 13.2.11 or later to resolve the issue...

8.8CVSS5.8AI score0.00731EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/03/13 12:00 a.m.•6 views

CVE-2022-38074: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection vulnerability in VeronaLabs WP Statistics plugin = 13.2.10 versions...

8.8CVSS7.9AI score0.00731EPSS
SaveExploits0References2
Packet Storm
Packet Storm
•added 2022/02/10 12:00 a.m.•342 views

WordPress VeronaLabs WP Statistics 13.1.4 SQL Injection

On February 7, 2022, Security Researcher Cyku Hong from DEVCORE reported a vulnerability to us that they discovered in WP Statistics, a WordPress plugin installed on over 600,000 sites. This vulnerability made it possible for unauthenticated attackers to execute arbitrary SQL queries by appending...

0.2AI score0.5346EPSS
SaveExploits3
CNNVD
CNNVD
•added 2022/02/10 12:00 a.m.•24 views

WordPress plugin VeronaLabs WP Statistics SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress plugin VeronaLabs WP...

9.8CVSS7.6AI score0.5346EPSS
SaveExploits3References3
CNVD
CNVD
•added 2019/07/08 12:00 a.m.•18 views

WordPress VeronaLabs wp-statistics plugin SQL Injection Vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers.VeronaLabs wp-statistics plugin is a website statistics plugin used in it. A SQL injection vulnerability exists in the v1/hi...

9.8CVSS8AI score0.02605EPSS
SaveExploits2References1
ThreatPost
ThreatPost
•added 2019/07/05 7:27 p.m.•232 views

WordPress Plugin WP Statistics Patches XSS Flaw

WordPress plugin WP Statistics has patched a cross-site scripting XSS vulnerability that could allow for full website takeover, if the website is operating under certain non-default settings. WP Statistics gives website owners a tool to analyze site statistics, such as the number of visitors on t...

0.4AI score
SaveExploits0References4
NVD
NVD
•added 2019/07/04 7:15 p.m.•34 views

CVE-2019-13275

An issue was discovered in the VeronaLabs wp-statistics plugin before 12.6.7 for WordPress. The v1/hit endpoint of the API, when the non-default "use cache plugin" setting is enabled, is vulnerable to unauthenticated blind SQL Injection...

9.8CVSS9.7AI score0.02605EPSS
SaveExploits2References3
Prion
Prion
•added 2019/07/04 7:15 p.m.•28 views

Sql injection

An issue was discovered in the VeronaLabs wp-statistics plugin before 12.6.7 for WordPress. The v1/hit endpoint of the API, when the non-default "use cache plugin" setting is enabled, is vulnerable to unauthenticated blind SQL Injection...

7.5CVSS9.6AI score0.02605EPSS
SaveExploits2References3Affected Software1
CVE
CVE
•added 2019/07/04 6:51 p.m.•246 views

CVE-2019-13275

The CVE-2019-13275 issue affects VeronaLabs wp-statistics plugin for WordPress up to version 12.6.7, where the v1/hit endpoint is vulnerable to unauthenticated blind SQL Injection when the non-default “use cache plugin” setting is enabled. Multiple connected sources (NVD, Red Hat, OSV, CNVD, etc....

9.8CVSS9.6AI score0.02605EPSS
SaveExploits2References3Affected Software1
Rows per page
Query Builder