Note:
This project will be discontinued after December 13, 2021. [more]
Product:
Visitor_traffic_real_time_statistics
(Wp\-Buy)| Repositories |
Unknown: This might be proprietary software. |
| #Vulnerabilities | 4 |
| Date | Id | Summary | Products | Score | Patch | Annotated |
|---|---|---|---|---|---|---|
| 2021-05-14 | CVE-2021-24193 | Low privileged users can use the AJAX action 'cp_plugins_do_button_job_later_callback' in the Visitor Traffic Real Time Statistics WordPress plugin before 2.12, to install any plugin (including a specific version) from the WordPress repository, as well as activate arbitrary plugin from then blog, which helps attackers install vulnerable plugins and could lead to more critical vulnerabilities like RCE. | Visitor_traffic_real_time_statistics | 8.8 | ||
| 2021-11-08 | CVE-2021-24829 | The Visitor Traffic Real Time Statistics WordPress plugin before 3.9 does not validate and escape user input passed to the today_traffic_index AJAX action (available to any authenticated users) before using it in a SQL statement, leading to an SQL injection issue | Visitor_traffic_real_time_statistics | 8.8 | ||
| 2019-08-30 | CVE-2019-15832 | The visitors-traffic-real-time-statistics plugin before 1.13 for WordPress has CSRF. | Visitor_traffic_real_time_statistics | 8.8 | ||
| 2019-08-30 | CVE-2019-15831 | The visitors-traffic-real-time-statistics plugin before 1.12 for WordPress has CSRF in the settings page. | Visitor_traffic_real_time_statistics | 8.8 |