Lucene search
WpvulndbWPVDB-ID:DA5B5669-7476-47AE-9DE0-D398CA408F2FHistoryFeb 16, 2022 - 12:00 a.m.
WP Statistics < 13.1.6 - Unauthenticated Blind SQL Injection via current_page_type
2022-02-1600:00:00
wpscan.com
24
wp statistics
unauthenticated
blind sql injection
current_page_type
parameterization
sensitive information
EPSS
0.31
Percentile
97.0%
The is vulnerable to SQL Injection due to insufficient escaping and parameterization of the current_page_type parameter found in the ~/includes/class-wp-statistics-hits.php file which allows attackers without authentication to inject arbitrary SQL queries to obtain sensitive information
Related
patchstack
patchstack
nuclei
nuclei
WordPress Plugin WP Statistics <= 13.1.5 - SQL Injection
2023-10-17 07:20:28
cvelist
cvelist
prion
prion
Sql injection
2022-02-24 19:15:00
cve
cve
CVE-2022-0651
2022-02-24 19:15:09
nvd
nvd
CVE-2022-0651
2022-02-24 19:15:09
openvas
openvas
WordPress WP Statistics Plugin < 13.1.6 Multiple Vulnerabilities
2022-03-08 00:00:00