Approved changes feed: RSS · Atom

cpe:2.3:a:newstatpress_project:newstatpress:*:*:*:*:*:wordpress:*:*

part: a version: * update: *

VendorNewstatpress Project (5fa3af8b-79d1-536e-b4da-bbaabe0532dc)
ProductNewstatpress (68ea7570-3481-5fd2-8974-41a57f393d1f)
Edition*
Language*
Software edition*
Target softwarewordpress
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-0206 vulnerable 2026-06-08 05:39:09.485401 NewStatPress < 1.3.6 - Reflected Cross-Site Scripting
The NewStatPress WordPress plugin before 1.3.6 does not properly escape the whatX parameters before outputting them back in attributes, leading to Reflected Cross-Site Scripting issues
Published: 2022-02-14T09:21:05.000Z
Updated: 2024-08-02T23:18:42.522Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-18575 vulnerable 2026-06-08 05:09:11.269870 Details available
The newstatpress plugin before 1.2.5 for WordPress has multiple stored XSS issues.
Published: 2019-08-22T12:59:44.000Z
Updated: 2024-08-05T21:28:55.583Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-9315 vulnerable 2026-06-08 05:07:13.553982 Details available
The newstatpress plugin before 1.0.1 for WordPress has SQL injection.
Published: 2019-08-14T14:51:56.000Z
Updated: 2024-08-06T08:43:42.478Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-9314 vulnerable 2026-06-08 05:07:13.553710 Details available
The newstatpress plugin before 1.0.4 for WordPress has XSS related to the Referer header.
Published: 2019-08-14T14:52:46.000Z
Updated: 2024-08-06T08:43:42.815Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-9313 vulnerable 2026-06-08 05:07:13.553451 Details available
The newstatpress plugin before 1.0.5 for WordPress has SQL injection related to an IMG element.
Published: 2019-08-14T14:53:16.000Z
Updated: 2024-08-06T08:43:42.420Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-9312 vulnerable 2026-06-08 05:07:13.553165 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-9311 vulnerable 2026-06-08 05:07:13.552790 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-4063 vulnerable 2026-06-08 05:06:39.133429 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-4062 vulnerable 2026-06-08 05:06:39.133017 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.