Skip to content
OpenAdvisories

Vendor

WP Statistics

9 known vulnerabilities.

Products

WP Statistics 9
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.2
    CVE-2022-25307

    WP Statistics <= 13.1.5 Unauthenticated Stored Cross-Site Scripting via platform

    The WP Statistics WordPress plugin is vulnerable to Cross-Site Scripting due to insufficient escaping and sanitization of the platform parameter found in the ~/includes/class-wp-statistics-hits.php file which allows attackers to inject arbitrary web scripts o…

    WP Statistics WP Statistics Web / CMS
  • High 7.2
    CVE-2022-25305 EPSS 79%

    WP Statistics <= 13.1.5 Unauthenticated Stored Cross-Site Scripting via IP

    The WP Statistics WordPress plugin is vulnerable to Cross-Site Scripting due to insufficient escaping and sanitization of the IP parameter found in the ~/includes/class-wp-statistics-ip.php file which allows attackers to inject arbitrary web scripts onto seve…

    WP Statistics WP Statistics Web / CMS
  • High 7.2
    CVE-2022-25306

    WP Statistics <= 13.1.5 Unauthenticated Stored Cross-Site Scripting via browser

    The WP Statistics WordPress plugin is vulnerable to Cross-Site Scripting due to insufficient escaping and sanitization of the browser parameter found in the ~/includes/class-wp-statistics-visitor.php file which allows attackers to inject arbitrary web scripts…

    WP Statistics WP Statistics Web / CMS