Wp-Statistics Wp Statistics vulnerabilities

3 known vulnerabilities affecting wp-statistics/wp_statistics.

Total CVEs

3

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

MEDIUM3

Vulnerabilities

Page 1 of 1

CVE-2017-10991MEDIUMCVSS 6.1≤ 12.0.92017-07-07

CVE-2017-10991 [MEDIUM] CWE-79 CVE-2017-10991: The WP Statistics plugin through 12.0.9 for WordPress has XSS in the rangestart and rangeend paramet The WP Statistics plugin through 12.0.9 for WordPress has XSS in the rangestart and rangeend parameters on the wps_referrers_page page.

CVE-2017-2147MEDIUMCVSS 6.1≤ 12.0.42017-04-28

CVE-2017-2147 [MEDIUM] CWE-79 CVE-2017-2147: Cross-site scripting vulnerability in WP Statistics version 12.0.4 and earlier allows remote attacke Cross-site scripting vulnerability in WP Statistics version 12.0.4 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVE-2017-2135MEDIUMCVSS 6.1≤ 12.0.12017-04-28

CVE-2017-2135 [MEDIUM] CWE-79 CVE-2017-2135: Cross-site scripting vulnerability in WP Statistics version 12.0.1 and earlier allows remote attacke Cross-site scripting vulnerability in WP Statistics version 12.0.1 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.