Monitor free

Report

New Known

Verified

Fixed

WordPress WP Visitor Statistics plugin <= 5.7 - Multiple Unauthenticated SQL Injection (SQLi) vulnerabilities

9.3

CVSS 3.1 score Critical severity

Report

Monitoring Not reported to be exploited

Find out about vulnerable plugins in your websites for free.

Scan your website

Software

WP Visitor Statistics (Real Time Traffic)

Type

Plugin

Vulnerable versions

<= 5.7

Fixed in

5.8

PSID

945162d8f8fe

CVE ID

CVE-2022-33965

Classification

SQL Injection

OWASP Top 10

A1: Injection

Required privilege

Can be exploited remotely without any authentication.

Credits

Rafie Muhammad aka Yeraisci (Patchstack Alliance)

Publicly disclosed

2022-07-05

Patchstack vPatch available since

09.12.2021

Details

Multiple Unauthenticated SQL Injection (SQLi) vulnerabilities were discovered by Rafie Muhammad aka Yeraisci (Patchstack Alliance) in the WordPress WP Visitor Statistics plugin (versions <= 5.7).

Solution

Update the WordPress WP Visitor Statistics plugin to the latest available version (at least 5.8).

References