CVE-2021-24829

CVE-2021-24829: Visitor Traffic Real Time Statistics < 3.9 - Subscriber+ SQL Injection

Vendor Unknown
Product Visitor Traffic Real Time Statistics
Weakness CWE-89 · SQLi
Published November 8, 2021
Last update August 3, 2024
View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

The Visitor Traffic Real Time Statistics WordPress plugin before 3.9 does not validate and escape user input passed to the today_traffic_index AJAX action (available to any authenticated users) before using it in a SQL statement, leading to an SQL injection issue

Key dates

02Disclosure timeline

November 8, 2021 CVE published
August 3, 2024 Record updated