Advisories · Technology
osamaesh WP Visitor Statistics (Real Time Traffic).
Every CVE that names osamaesh WP Visitor Statistics (Real Time Traffic) among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.5 Medium
WP Visitor Statistics (Real Time Traffic) <= 8.8 - Authenticated (Contributor+) SQL Injection via 'from' Shortcode Attribute
- osamaesh WP Visitor Statistics (Real Time Traffic)
- SQL injection
- CVSS 7.5 High
WP Visitor Statistics (Real Time Traffic) <= 8.7 - Unauthenticated SQL Injection via 'fullRef' Parameter
- osamaesh WP Visitor Statistics (Real Time Traffic)
- SQL injection
- CVSS 6.4 Medium
WP Visitor Statistics (Real Time Traffic) <= 8.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'height' Shortcode Attribute
- osamaesh WP Visitor Statistics (Real Time Traffic)
- Cross-site scripting (XSS)
- CVSS 5.3 Medium
WordPress WP Stats Manager plugin <= 6.9.4 - Sensitive Data Exposure vulnerability
- Osamaesh WP Visitor Statistics (Real Time Traffic)
- Information disclosure