Known vulnerabilities in WP Statistics

Vendor: VeronaLabs
Software: WP Statistics
Software CPE: cpe:2.3:a:mostafas1990:wp-statistics:*:*:*:*:*:wordpress:*:*
Total vulnerabilities: 12
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting WP Statistics WP Statistics is affected by 12 known vulnerabilities: 4 high, 8 low Critical High Medium Low

Vulnerabilities (12)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU63572 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-27231
CWE-79 Low
No
No
13.2.0 24.05.2022 SB2022052407
#VU53400 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2021-24340
CWE-89 High
No
No
13.0.8 20.05.2021 SB2021052016
#VU20791 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
9.5.2 02.09.2019 SB2015081006
#VU20610 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
12.0.9 02.09.2019 SB2017070311
#VU19844 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CWE-89 High
No
No
9.4.1 02.08.2019 SB2015070904
#VU19762 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-2136
CWE-79 Low
No
No
12.0.5 02.08.2019 SB2017041007
#VU19749 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CWE-89 High
No
No
12.0.8 02.08.2019 SB2017063025
#VU19745 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-10991
CWE-79 Low
No
No
12.0.10 02.08.2019 SB2017070710
#VU19034 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
12.6.7 08.07.2019 SB2019070401
#VU19005 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-10864
CWE-79 Low
No
No
12.6.3 04.07.2019 SB2019042308
#VU18971 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CWE-89 High
No
No
12.6.7 03.07.2019 SB2019070401
#VU18882 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-12566
CWE-79 Low
No
No
12.6.6.1 24.06.2019 SB2019053007