← CVE Intelligence

CVE-2022-0410

WP Visitor Statistics (Real Time Traffic) < 5.6 - Subscriber+ SQL Injection PUBLISHED

Description (CNA)

The WP Visitor Statistics (Real Time Traffic) WordPress plugin before 5.6 does not sanitise and escape the id parameter before using it in a SQL statement via the refUrlDetails AJAX action, available to any authenticated user, leading to a SQL injection

Affected (CNA)

Vendor / productVersions
Unknown / WP Visitor Statistics (Real Time Traffic)affected 5.6 before 5.6

CWE

CWE-89

References

ADP enrichment

CVE

No English description supplied.