Skip to content
OpenAdvisories

Vendor

codejunkie

1 known vulnerabilities.

Products

Clik stats 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.1
    CVE-2025-13513

    Clik stats <= 0.8 - Reflected Cross-Site Scripting via $_SERVER['PHP_SELF']

    The Clik stats plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the `$_SERVER['PHP_SELF']` parameter in all versions up to, and including, 0.8 due to insufficient input sanitization and output escaping. This makes it possible for unaut…

    codejunkie Clik stats Web / CMS