Wp Statistics
Approved changes feed: RSS · Atom
cpe:2.3:a:wp_statistics:wp_statistics:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Wp Statistics (4b3cc79a-ccec-5ecb-aba6-6fca1d838ba2) |
|---|---|
| Product | Wp Statistics (3ad8ad7a-fd86-552e-93be-c1bbc590945f) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/wp-plugins/wp-statistics |
purl2cpe | 2026-06-01 10:11:15.008638 |
pkg:github/wpplugins/wp-statistics |
purl2cpe | 2026-06-01 10:11:15.008640 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-25307 |
vulnerable | 2026-06-08 05:41:45.695111 |
WP Statistics <= 13.1.5 Unauthenticated Stored Cross-Site Scripting via platform
HIGH (7.2)
The WP Statistics WordPress plugin is vulnerable to Cross-Site Scripting due to insufficient escaping and sanitization of the platform parameter found in the ~/includes/class-wp-statistics-hits.php file which allows attackers to inject arbitrary web scripts onto several pages that execute when site administrators view a sites statistics, in versions up to and including 13.1.5.
Published: 2022-02-24T18:27:12.000Z
Updated: 2025-02-07T20:49:32.081Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-25306 |
vulnerable | 2026-06-08 05:41:45.694613 |
WP Statistics <= 13.1.5 Unauthenticated Stored Cross-Site Scripting via browser
HIGH (7.2)
The WP Statistics WordPress plugin is vulnerable to Cross-Site Scripting due to insufficient escaping and sanitization of the browser parameter found in the ~/includes/class-wp-statistics-visitor.php file which allows attackers to inject arbitrary web scripts onto several pages that execute when site administrators view a sites statistics, in versions up to and including 13.1.5.
Published: 2022-02-24T18:27:09.000Z
Updated: 2025-01-31T18:54:56.482Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-25305 |
vulnerable | 2026-06-08 05:41:45.694076 |
WP Statistics <= 13.1.5 Unauthenticated Stored Cross-Site Scripting via IP
HIGH (7.2)
The WP Statistics WordPress plugin is vulnerable to Cross-Site Scripting due to insufficient escaping and sanitization of the IP parameter found in the ~/includes/class-wp-statistics-ip.php file which allows attackers to inject arbitrary web scripts onto several pages that execute when site administrators view a sites statistics, in versions up to and including 13.1.5.
Published: 2022-02-24T18:27:11.000Z
Updated: 2025-02-07T20:49:45.849Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-25149 |
vulnerable | 2026-06-08 05:41:45.217004 |
WP Statistics <= 13.1.5 Unauthenticated Blind SQL Injection via IP
CRITICAL (9.8)
The WP Statistics WordPress plugin is vulnerable to SQL Injection due to insufficient escaping and parameterization of the IP parameter found in the ~/includes/class-wp-statistics-hits.php file which allows attackers without authentication to inject arbitrary SQL queries to obtain sensitive information, in versions up to and including 13.1.5.
Published: 2022-02-24T18:27:08.000Z
Updated: 2025-01-31T18:55:15.260Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-25148 |
vulnerable | 2026-06-08 05:41:45.215481 |
WP Statistics <= 13.1.5 Unauthenticated Blind SQL Injection via current_page_id
CRITICAL (9.8)
The WP Statistics WordPress plugin is vulnerable to SQL Injection due to insufficient escaping and parameterization of the current_page_id parameter found in the ~/includes/class-wp-statistics-hits.php file which allows attackers without authentication to inject arbitrary SQL queries to obtain sensitive information, in versions up to and including 13.1.5.
Published: 2022-02-24T00:00:00.000Z
Updated: 2024-08-03T04:29:01.616Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-0651 |
vulnerable | 2026-06-08 05:39:10.464447 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-2147 |
vulnerable | 2026-06-08 05:09:23.692489 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-2136 |
vulnerable | 2026-06-08 05:09:23.663868 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-2135 |
vulnerable | 2026-06-08 05:09:23.662634 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.