Approved changes feed: RSS · Atom

cpe:2.3:a:plugins-market:wp_visitor_statistics:*:*:*:*:*:wordpress:*:*

part: a version: * update: *

VendorPlugins Market (d110b0be-6cdf-53b5-9bb6-6aa16ce2bdca)
ProductWp Visitor Statistics (466ae666-9514-5ff1-a106-9f53e70e4372)
Edition*
Language*
Software edition*
Target softwarewordpress
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-0600 vulnerable 2026-06-08 05:52:32.047320 WP Visitor Statistics (Real Time Traffic) < 6.9 - Unauthenticated SQLi
The WP Visitor Statistics (Real Time Traffic) WordPress plugin before 6.9 does not escape user input which is concatenated to an SQL query, allowing unauthenticated visitors to conduct SQL Injection attacks.
Published: 2023-05-15T12:15:31.686Z
Updated: 2025-01-24T20:22:17.142Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-4656 vulnerable 2026-06-08 05:52:00.123643 WP Visitor Statistics (Real Time Traffic) < 6.5 - Contributor+ Stored XSS via Shortcode
The WP Visitor Statistics (Real Time Traffic) WordPress plugin before 6.5 does not validate and escape one of its shortcode attributes, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attack.
Published: 2023-02-13T14:32:19.074Z
Updated: 2025-03-20T18:36:55.634Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-33965 vulnerable 2026-06-08 05:44:51.881775 WordPress WP Visitor Statistics plugin <= 5.7 - Multiple Unauthenticated SQL Injection (SQLi) vulnerabilities
CRITICAL (9.3)
Multiple Unauthenticated SQL Injection (SQLi) vulnerabilities in Osamaesh WP Visitor Statistics plugin <= 5.7 at WordPress.
Published: 2022-07-25T14:01:28.353Z
Updated: 2026-04-28T16:07:43.995Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.