CVE-2019-15112

The wp-slimstat plugin before 4.8.1 for WordPress has XSS...

CVE-2015-1204

Cross-site scripting XSS vulnerability in the Save Filters functionality in the WP Slimstat plugin before 3.9.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the fsresource parameter in the wp-slim-view-2 page to wp-admin/admin.php...

CVE-2019-15112

The wp-slimstat plugin before 4.8.1 for WordPress has XSS...

WordPress Sites Vulnerable to Plugin-Related SQL Attacks

More than one million WordPress sites may be vulnerable to a critical plugin issue that could open sites up to SQL injection attacks and in turn, total takeover. The problem stems from a weak key vulnerability in WP-Slimstat, a web analytics plugin for the content management system that’s been...

CVE-2015-1204

Cross-site scripting XSS vulnerability in the Save Filters functionality in the WP Slimstat plugin before 3.9.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the fsresource parameter in the wp-slim-view-2 page to wp-admin/admin.php...

Cross site scripting

Cross-site scripting XSS vulnerability in the Save Filters functionality in the WP Slimstat plugin before 3.9.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the fsresource parameter in the wp-slim-view-2 page to wp-admin/admin.php...

CVE-2015-1204

Summary: WP Slimstat for WordPress is affected by a Cross-Site Scripting (XSS) vulnerability in the Save Filters functionality. The issue allows an attacker to inject arbitrary script or HTML via the fs[resource] parameter on the wp-slim-view-2 page (to wp-admin/admin.php). Affected versions: bef...