CVE-2022-0410

CVE-2022-0410: WP Visitor Statistics (Real Time Traffic) < 5.6 - Subscriber+ SQL Injection

Vendor Unknown
Product WP Visitor Statistics (Real Time Traffic)
Weakness CWE-89 · SQLi
Published March 7, 2022
Last update August 2, 2024
View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

The WP Visitor Statistics (Real Time Traffic) WordPress plugin before 5.6 does not sanitise and escape the id parameter before using it in a SQL statement via the refUrlDetails AJAX action, available to any authenticated user, leading to a SQL injection

Key dates

02Disclosure timeline

March 7, 2022 CVE published
August 2, 2024 Record updated