334 matches found
CVE-2019-10864
CVE-2019-10864 affects the WordPress WP Statistics plugin (up to version 12.6.2; referenced in multiple sources up to 12.6.3). The vulnerability is a cross-site scripting (XSS) flaw that allows a remote attacker to inject arbitrary web script or HTML via the Referer header on a GET request. The O...
PT-2019-12062
Name of the Vulnerable Software and Affected Versions WP Statistics plugin versions prior to 12.6.3 Description The issue allows a remote attacker to inject arbitrary web script or HTML via the Referer header of a GET request, potentially leading to cross-site scripting XSS attacks. Recommendatio...
CVE-2019-10864: Improper Neutralization of Input During Web Page Generation
The WP Statistics plugin through 12.6.2 for WordPress has XSS, allowing a remote attacker to inject arbitrary web script or HTML via the Referer header of a GET request...
WordPress WP Statistics < 12.0.6 XSS Vulnerability
The WordPress plugin SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:veronalabs:wpstatistics"; ifdescription...
WordPress WP Statistics plugin cross-site scripting vulnerability (CNVD-2018-04483)
WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports PHP and MySQL server set up a personal blog site.WP Statistics is one of the website statistical analysis plugin. A cross-site scripting vulnerability exists in...
WordPress WP Statistics Plugin <= 12.0.9 XSS Vulnerability
The WordPress plugin SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description scriptoid"1.3.6.1.4.1.25623.1.0.106960";...
Design/Logic Flaw
The WP Statistics plugin through 12.0.9 for WordPress has XSS in the rangestart and rangeend parameters on the wpsreferrerspage page...
CVE-2017-10991
The WP Statistics plugin through 12.0.9 for WordPress has XSS in the rangestart and rangeend parameters on the wpsreferrerspage page...
CVE-2017-10991
CVE-2017-10991 affects the WordPress WP Statistics plugin up to version 12.0.9. The vulnerability is an XSS in the rangestart and rangeend parameters on the wps_referrers_page. CVSS metrics in the provided documents indicate: confidentiality impact LOW, integrity impact PARTIAL, availability impa...
CVE-2017-10991
The WP Statistics plugin through 12.0.9 for WordPress has XSS in the rangestart and rangeend parameters on the wpsreferrerspage page...
WP Statistics <= 12.0.9 - Authenticated Cross-Site Scripting (XSS)
The WP Statistics WordPress plugin was affected by an Authenticated Cross-Site Scripting XSS security vulnerability. PoC http://mywordpress.com/wp-admin/admin.php?page=wpsreferrerspage=123123"...
PT-2017-11666
Name of the Vulnerable Software and Affected Versions WP Statistics plugin versions prior to 12.0.10 Description The issue concerns a security problem where an attacker can execute malicious scripts. This is possible due to improper validation of user input in the rangestart and rangeend paramete...
CVE-2017-10991: Improper Neutralization of Input During Web Page Generation
The WP Statistics plugin through 12.0.9 for WordPress has XSS in the rangestart and rangeend parameters on the wpsreferrerspage page...
WP Statistics SQL Injection vulnerability
Security experts at Sucuri have discovered a SQL Injection vulnerability in WP Statistics, one of the most popular WordPress plugins, that is currently installed on over 300,000 websites. The SQL Injection vulnerability in WP Statistics could be exploited by attackers, with at least a subscriber...
WordPress WP Statistics plugin <=12.0.7 - Authenticated SQL Injection vulnerability
WordPress WP Statistic plugin in version 12.0.7 and earlier versions vulnerable to Authenticated SQL Injection vulnerability due to lack of sanitization in user-provided data. In this case users even with subscriber rights could use this vulnerability to steal sensitive data. Solution The plugin...
WordPress Plugin Used by 300,000+ Sites Found Vulnerable to SQL Injection Attack
A SQL Injection vulnerability has been discovered in one of the most popular Wordpress plugins, installed on over 300,000 websites, which could be exploited by hackers to steal databases and possibly hijack the affected sites remotely. The flaw has been discovered in the highly popular WP...
WP Statistics <= 12.0.7 - Authenticated SQL Injection
The WP Statistics WordPress plugin was affected by an Authenticated SQL Injection security vulnerability...
CVE-2017-2147
Cross-site scripting vulnerability in WP Statistics version 12.0.4 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...