Skip to content
Threat Feed
Subscribe

Product

WP Visitor Statistics (Real Time Traffic) (<= 8.7)

1 brief RSS
high advisory

Second-Order SQL Injection in WP Visitor Statistics Plugin

The WP Visitor Statistics plugin (up to 8.7) is vulnerable to a second-order SQL injection allowing unauthenticated attackers to exfiltrate database information via the 'fullRef' parameter.

WP Visitor Statistics sqli web-application wordpress
1r 1t 1c