Skip to content
OpenAdvisories

Vendor

WP Statistics

9 known vulnerabilities.

Products

WP Statistics 9
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2022-25148 Public exploit EPSS 81%

    WP Statistics <= 13.1.5 Unauthenticated Blind SQL Injection via current_page_id

    The WP Statistics WordPress plugin is vulnerable to SQL Injection due to insufficient escaping and parameterization of the current_page_id parameter found in the ~/includes/class-wp-statistics-hits.php file which allows attackers without authentication to inj…

    WP Statistics WP Statistics Web / CMS