Show filters
6 Total Results
Displaying 1-6 of 6
Sort by:
Attacker Value
Unknown
CVE-2024-31250
Disclosure Date: April 12, 2024 (last updated April 13, 2024)
Cross-Site Request Forgery (CSRF) vulnerability in Saumya Majumder WP Server Health Stats.This issue affects WP Server Health Stats: from n/a through 1.7.3.
0
Attacker Value
Unknown
CVE-2023-45011
Disclosure Date: October 12, 2023 (last updated October 18, 2023)
Cross-Site Request Forgery (CSRF) vulnerability in Igor Buyanov WP Power Stats plugin <= 2.2.3 versions.
0
Attacker Value
Unknown
CVE-2022-2887
Disclosure Date: September 16, 2022 (last updated October 08, 2023)
The WP Server Health Stats WordPress plugin before 1.7.0 does not escape some of its settings, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.
0
Attacker Value
Unknown
CVE-2015-10001
Disclosure Date: November 01, 2021 (last updated November 29, 2024)
The WP-Stats WordPress plugin before 2.52 does not have CSRF check when saving its settings, and did not escape some of them when outputting them, allowing attacker to make logged in high privilege users change them and set Cross-Site Scripting payloads
0
Attacker Value
Unknown
CVE-2015-9399
Disclosure Date: September 20, 2019 (last updated November 27, 2024)
The wp-stats-dashboard plugin through 2.9.4 for WordPress has admin/graph_trend.php type SQL injection.
0
Attacker Value
Unknown
CVE-2006-0238
Disclosure Date: January 18, 2006 (last updated February 22, 2025)
SQL injection vulnerability in wp-stats.php in GaMerZ WP-Stats 2.0 allows remote attackers to execute arbitrary SQL commands via the author parameter.
0
