CVE-2022-33965

概要

参考情報

• patchstack.com/database/vulnerability/wp-stats-manager/wordpress-wp-visitor-statistics-plugin-5-7-multiple-unauthenticated-sql-injection-sqli-vulnerabilities · Patch
• wordpress.org/plugins/wp-stats-manager · Release Notes

visitor statistics のその他の脆弱性

• CVE-2024-24867高 7.5Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Osamaesh WP Visitor Statistics (Real Time Traffic).This issue af…
• CVE-2023-0600緊急 9.8The WP Visitor Statistics (Real Time Traffic) WordPress plugin before 6.9 does not escape user input which is concatenated to an SQL query, …
• CVE-2022-4656中 5.4The WP Visitor Statistics (Real Time Traffic) WordPress plugin before 6.5 does not validate and escape one of its shortcode attributes, whic…
• CVE-2022-0410高 8.8The WP Visitor Statistics (Real Time Traffic) WordPress plugin before 5.6 does not sanitise and escape the id parameter before using it in a…
• CVE-2021-25042中 5.4The WP Visitor Statistics (Real Time Traffic) WordPress plugin before 5.5 does not have authorisation and CSRF checks in the updateIpAddress…