Newstatpress
Approved changes feed: RSS · Atom
cpe:2.3:a:unknown:newstatpress:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Unknown (668ca391-a6cc-5e33-879b-83885214de33) |
|---|---|
| Product | Newstatpress (36ea88f6-de0b-5461-802e-c6be91a6fe36) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-14845 |
vulnerable | 2026-09-16 04:33:12.398705 |
NewStatPress < 1.4.5 - Unauthenticated Stored XSS via Top Post Widget
The NewStatPress WordPress plugin before 1.4.5 does not sanitise and escape data derived from unauthenticated visitor requests before storing it and later outputting it in one of its widgets, which could allow unauthenticated attackers to perform Stored Cross-Site Scripting attacks against users viewing the affected widget.
Published: 2026-07-31T06:00:07.409Z
Updated: 2026-07-31T19:38:14.518Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-0206 |
vulnerable | 2026-06-08 05:39:09.484174 |
NewStatPress < 1.3.6 - Reflected Cross-Site Scripting
The NewStatPress WordPress plugin before 1.3.6 does not properly escape the whatX parameters before outputting them back in attributes, leading to Reflected Cross-Site Scripting issues
Published: 2022-02-14T09:21:05.000Z
Updated: 2024-08-02T23:18:42.522Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.