Advisories · Technology
WP Visitor Statistics (Real Time Traffic).
Every CVE that names WP Visitor Statistics (Real Time Traffic) among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 4.1 Medium
WP Visitor Statistics (Real Time Traffic) < 8.8 - Admin+ SQLi via 'order' Parameter
- WP Visitor Statistics (Real Time Traffic)
- SQL injection
- CVSS 8.8 High
WP Visitor Statistics (Real Time Traffic) < 8.8 - Unauthenticated Stored XSS via Tracker Device Parameters
- WP Visitor Statistics (Real Time Traffic)
- Cross-site scripting (XSS)
- CVSS 9.8 CriticalCritical · CVSS 9+
WP Visitor Statistics (Real Time Traffic) < 6.9 - Unauthenticated SQLi
- WP Visitor Statistics (Real Time Traffic)
- CVSS 5.4 Medium
WP Visitor Statistics (Real Time Traffic) < 6.5 - Contributor+ Stored XSS via Shortcode
- WP Visitor Statistics (Real Time Traffic)
-
WP Visitor Statistics (Real Time Traffic) < 5.6 - Subscriber+ SQL Injection
- WP Visitor Statistics (Real Time Traffic)
- SQL injection
-
WP Visitor Statistics (Real Time Traffic) < 5.5 - Arbitrary IP Address Exclusion to Stored XSS
- WP Visitor Statistics (Real Time Traffic)
- Broken access control
-
WP Visitor Statistics (Real Time Traffic) < 4.8 - Subscriber+ SQL Injection
- WP Visitor Statistics (Real Time Traffic)
- SQL injection