Vulnerabilities in WP Statistics

9 results

Vexday analysis

WP Statistics apresenta 9 vulnerabilidades conhecidas, com 3 classificadas como críticas, mas nenhuma sob ataque ativo no momento. A fraqueza dominante é Cross-Site Scripting (CWE-79), típica de plugins WordPress, sem novos registros nos últimos 90 dias, indicando risco estável e de menor urgência operacional.

CVE-2022-25148CRITICALWP Statistics <= 13.1.5 Unauthenticated Blind SQL Injection via current_page_idEPSS 80.9%CVE-2022-25305HIGHWP Statistics <= 13.1.5 Unauthenticated Stored Cross-Site Scripting via IPEPSS 78.9%CVE-2022-25149CRITICALWP Statistics <= 13.1.5 Unauthenticated Blind SQL Injection via IPEPSS 78.0%CVE-2022-0651CRITICALWP Statistics <= 13.1.5 Unauthenticated Blind SQL Injection via current_page_typeEPSS 32.2%CVE-2017-2136—Cross-site scripting vulnerability in WP Statistics version 12.0.4 and earlier allows remote attackers to inject arbitrary web script or HTMEPSS 2.6%CVE-2017-2135—Cross-site scripting vulnerability in WP Statistics version 12.0.1 and earlier allows remote attackers to inject arbitrary web script or HTMEPSS 1.7%CVE-2022-25306HIGHWP Statistics <= 13.1.5 Unauthenticated Stored Cross-Site Scripting via browserEPSS 1.4%CVE-2022-25307HIGHWP Statistics <= 13.1.5 Unauthenticated Stored Cross-Site Scripting via platformEPSS 1.4%CVE-2017-2147—Cross-site scripting vulnerability in WP Statistics version 12.0.4 and earlier allows remote attackers to inject arbitrary web script or HTMEPSS 1.3%