Description The wp-statistics plugin before 12.0.8 for WordPress has SQL injection. References https://wordpress.org/plugins/wp-statistics/#developers