Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:wordpress:wp_visitor_statistics:*:*:*:*:*:*:*:*

1 brief RSS
high advisory

Second-Order SQL Injection in WP Visitor Statistics Plugin

The WP Visitor Statistics plugin (up to 8.7) is vulnerable to a second-order SQL injection allowing unauthenticated attackers to exfiltrate database information via the 'fullRef' parameter.

WP Visitor Statistics sqli web-application wordpress
1r 1t 1c