Skip to content
OpenAdvisories

Vendor

WP Statistics

9 known vulnerabilities.

Products

WP Statistics 9
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.8
    CVE-2022-25149 Scanner template EPSS 77%

    WP Statistics <= 13.1.5 Unauthenticated Blind SQL Injection via IP

    The WP Statistics WordPress plugin is vulnerable to SQL Injection due to insufficient escaping and parameterization of the IP parameter found in the ~/includes/class-wp-statistics-hits.php file which allows attackers without authentication to inject arbitrary…

    WP Statistics WP Statistics Web / CMS
  • Critical 9.8
    CVE-2022-0651 Scanner template EPSS 32%

    WP Statistics <= 13.1.5 Unauthenticated Blind SQL Injection via current_page_type

    The WP Statistics WordPress plugin is vulnerable to SQL Injection due to insufficient escaping and parameterization of the current_page_type parameter found in the ~/includes/class-wp-statistics-hits.php file which allows attackers without authentication to i…

    WP Statistics WP Statistics Web / CMS
  • Critical 9.8
    CVE-2022-25148 Public exploit Scanner template EPSS 81%

    WP Statistics <= 13.1.5 Unauthenticated Blind SQL Injection via current_page_id

    The WP Statistics WordPress plugin is vulnerable to SQL Injection due to insufficient escaping and parameterization of the current_page_id parameter found in the ~/includes/class-wp-statistics-hits.php file which allows attackers without authentication to inj…

    WP Statistics WP Statistics Web / CMS