Approved changes feed: RSS · Atom

cpe:2.3:a:web-stat:web-stat:*:*:*:*:*:wordpress:*:*

part: a version: * update: *

VendorWeb Stat (0e75b7cc-ea24-54c8-9520-b3a96aac8211)
ProductWeb Stat (a7650b8b-5505-5d90-8ba8-70eb4c5da3c4)
Edition*
Language*
Software edition*
Target softwarewordpress
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-24167 vulnerable 2026-06-08 05:30:03.900406 Web-Stat < 1.4.1 - API Key Disclosure
When visiting a site running Web-Stat < 1.4.0, the "wts_web_stat_load_init" function used the visitor’s browser to send an XMLHttpRequest request to https://wts2.one/ajax.htm?action=lookup_WP_account.
Published: 2021-04-05T18:27:43.000Z
Updated: 2024-08-03T19:21:18.623Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.