CVE-2022-25148

Mô tả

Tham khảo

• packetstormsecurity.com/files/174482/WordPress-WP-Statistics-13.1.5-SQL-Injection.html · Exploit
• gist.github.com/Xib3rR4dAr/5dbd58b7f57a5037fe461fba8e696042 · Exploit
• plugins.trac.wordpress.org/changeset · Patch
• wordfence.com/vulnerability-advisories · Third Party Advisory

Lỗ hổng khác của wp statistics

• CVE-2023-0955CAO 8.8The WP Statistics WordPress plugin before 14.0 does not escape a parameter, which could allow authenticated users to perform SQL Injection a…
• CVE-2022-38074CAO 8.8SQL Injection vulnerability in VeronaLabs WP Statistics plugin <= 13.2.10 versions.
• CVE-2021-4333TRUNG BÌNH 6.5The WP Statistics plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 13.1.1. This is due to …
• CVE-2022-4230CAO 8.8The WP Statistics WordPress plugin before 13.2.9 does not escape a parameter, which could allow authenticated users to perform SQL Injection…
• CVE-2022-27231TRUNG BÌNH 6.1Cross-site scripting vulnerability exists in WP Statistics versions prior to 13.2.0 because it improperly processes a platform parameter. By…