Skip to content
OpenAdvisories

Archive

24 February 2022

Vulnerabilities first published on this day (UTC), newest first.

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2022-25148 Public exploit Scanner template EPSS 81%

    WP Statistics <= 13.1.5 Unauthenticated Blind SQL Injection via current_page_id

    The WP Statistics WordPress plugin is vulnerable to SQL Injection due to insufficient escaping and parameterization of the current_page_id parameter found in the ~/includes/class-wp-statistics-hits.php file which allows attackers without authentication to inj…