CVE-2015-4062

Description

References

• packetstormsecurity.com/files/132038/WordPress-NewStatPress-0.9.8-Cross-Site-Scripting-SQL-Injection.html · Exploit
• securityfocus.com/bid/74773
• wordpress.org/plugins/newstatpress/changelog · Patch
• exploit-db.com/exploits/37107 · Exploit

Autres vulnérabilités de newstatpress

• CVE-2017-20094MOYENNE 5.4A vulnerability, which was classified as problematic, has been found in NewStatPress Plugin 1.2.4. This issue affects some unknown processin…
• CVE-2022-0206MOYENNE 6.1The NewStatPress WordPress plugin before 1.3.6 does not properly escape the whatX parameters before outputting them back in attributes, lead…
• CVE-2017-18575MOYENNE 6.1The newstatpress plugin before 1.2.5 for WordPress has multiple stored XSS issues.
• CVE-2015-9315CRITIQUE 9.8The newstatpress plugin before 1.0.1 for WordPress has SQL injection.
• CVE-2015-9314MOYENNE 6.1The newstatpress plugin before 1.0.4 for WordPress has XSS related to the Referer header.