CVE-2022-33965 CRITICAL

CVE-2022-33965: WordPress WP Visitor Statistics plugin <= 5.7 - Multiple Unauthenticated SQL Injection (SQLi) vulnerabilities

Vendor Osamaesh
Product WP Visitor Statistics (WordPress plugin)
Weakness CWE-89 · SQLi
Published July 25, 2022
Last update April 28, 2026
View on NVD All CVEs

CVSS base score

9.3/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality High
Integrity Low

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N

What the vulnerability does

01Description

Multiple Unauthenticated SQL Injection (SQLi) vulnerabilities in Osamaesh WP Visitor Statistics plugin <= 5.7 at WordPress.

Key dates

02Disclosure timeline

July 25, 2022 CVE published
April 28, 2026 Record updated

Related vulnerabilities

04Related CVE

CVE-2024-4847 Alt Text AI – Automatically generate image alt text for SEO and accessibility <= 1.4.9 - Authenticated (Subscriber+) SQL Injection CVE-2026-8771 linlinjava litemall Front-end WeChat API WxGoodsController.java list sql injection CVE-2026-9446 SourceCodester Simple POS and Inventory System edit_customer.php sql injection CVE-2023-2210 Campcodes Coffee Shop POS System view_category.php sql injection CVE-2014-125079 agy pontifex.http Http.coffee sql injection