Skip to content
OpenAdvisories

Vendor

codepress

3 known vulnerabilities.

Products

Visitor Traffic Real Time Statistics Pro 2 Admin Columns 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.5
    CVE-2026-66430

    WordPress Visitor Traffic Real Time Statistics Pro plugin <= 11.10 - SQL Injection vulnerability

    Subscriber SQL Injection in Visitor Traffic Real Time Statistics Pro <= 11.10 versions.

    codepress Visitor Traffic Real Time Statistics Pro
  • High 7.1
    CVE-2026-66429

    WordPress Visitor Traffic Real Time Statistics Pro plugin <= 11.10 - Cross Site Scripting (XSS) vulnerability

    Unauthenticated Cross Site Scripting (XSS) in Visitor Traffic Real Time Statistics Pro <= 11.10 versions.

    codepress Visitor Traffic Real Time Statistics Pro
  • High 8.8
    CVE-2026-7654 Public exploit

    Admin Columns <= 7.0.18 - Authenticated (Contributor+) PHP Object Injection to Remote Code Execution via Custom Field Meta Value

    The Admin Columns plugin for WordPress is vulnerable to PHP Object Injection leading to Remote Code Execution in versions up to and including 7.0.18. This is due to the use of `unserialize()` without an `allowed_classes` restriction in the `IdsToCollection::g…

    codepress Admin Columns Web / CMS