CVE-2007-4104

MEDIUM 4.3CVE-2007-4104 · Published 31/07/2007 · updated 16/06/2026

In short

CVE-2007-4104 is a MEDIUM (CVSS 4.3) vulnerability affecting wordpress plugin (wp-feedstats).
Chance of exploitation in the next 30 days (EPSS): 5.1%, higher than 92.4% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
wordpress plugin wp-feedstats	`≤ 2.1`	No fix yet

Description

Multiple cross-site scripting (XSS) vulnerabilities in the WP-FeedStats before 2.4 plugin for WordPress allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, one of which involves an rss2 feed with an invalid or missing blog with an XSS sequence in the query string.

References

blogsecurity.net/news/news-130707
blogsecurity.net/wordpress/news-260707
bueltge.de/plugin-wp-feedstats-in-neuer-version/481 · Patch
marc.info · Exploit
osvdb.org/37259
secunia.com/advisories/26249 · Patch
securityfocus.com/bid/25085 · Exploit
exchange.xforce.ibmcloud.com/vulnerabilities/35646

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free