Test Kennung:	1.3.6.1.4.1.25623.1.0.147775
Kategorie:	Web application abuses
Titel:	WordPress WP Statistics Plugin < 13.1.6 Multiple Vulnerabilities
Zusammenfassung:	The WordPress plugin 'WP Statistics' is prone to multiple; vulnerabilities.
Beschreibung:	Summary: The WordPress plugin 'WP Statistics' is prone to multiple vulnerabilities. Vulnerability Insight: The following vulnerabilities exist: - CVE-2022-0651: Unauthenticated blind SQL injection (SQLi) via current_page_type - CVE-2022-25148: Unauthenticated blind SQL injection (SQLi) via current_page_id - CVE-2022-25149: Unauthenticated blind SQL injection (SQLi) via IP - CVE-2022-25305: Unauthenticated stored cross-site scripting (XSS) via IP - CVE-2022-25306: Unauthenticated stored cross-site scripting (XSS) via browser - CVE-2022-25307: Unauthenticated stored cross-site scripting (XSS) via platform Affected Software/OS: WordPress WP Statistics plugin through version 13.1.5. Solution: Update to version 13.1.6 or later. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2022-0651 https://gist.github.com/Xib3rR4dAr/5dbd58b7f57a5037fe461fba8e696042 https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2679983%40wp-statistics&new=2679983%40wp-statistics&sfp_email=&sfph_mail= https://www.wordfence.com/vulnerability-advisories/#CVE-2022-0651 Common Vulnerability Exposure (CVE) ID: CVE-2022-25148 http://packetstormsecurity.com/files/174482/WordPress-WP-Statistics-13.1.5-SQL-Injection.html https://www.wordfence.com/vulnerability-advisories/#CVE-2022-25148 Common Vulnerability Exposure (CVE) ID: CVE-2022-25149 https://www.wordfence.com/vulnerability-advisories/#CVE-2022-25149 Common Vulnerability Exposure (CVE) ID: CVE-2022-25305 https://gist.github.com/Xib3rR4dAr/af90cef7867583ab2de4cccea2a8c87d https://www.wordfence.com/vulnerability-advisories/#CVE-2022-25305 Common Vulnerability Exposure (CVE) ID: CVE-2022-25306 https://gist.github.com/Xib3rR4dAr/89fc87ea1d62348c21c99fc11a3bfd88 https://www.wordfence.com/vulnerability-advisories/#CVE-2022-25306 Common Vulnerability Exposure (CVE) ID: CVE-2022-25307 https://gist.github.com/Xib3rR4dAr/8090a6d026d4601083cff80aa80de7eb https://www.wordfence.com/vulnerability-advisories/#CVE-2022-25307
Copyright	Copyright (C) 2022 Greenbone Networks GmbH

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.