WordPress Plugin Vulnerabilities

Visitors Online < 0.4 - SQL Injection

Description

The Visitors Online by BestWebSoft WordPress plugin was affected by a SQL Injection security vulnerability.

Affects Plugins

Plugin icon
visitors-online
Fixed in 0.4

References

CVE
CVE-2015-9325

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79
CVSS
9.8 (critical)

Miscellaneous

Verified
No
WPVDB ID
132ba786-2c0a-4c2c-96ae-648356c0cd76

Timeline

Publicly Published
2015-10-26 (about 10 years ago)
Added
2019-08-25 (about 6 years ago)
Last Updated
2020-09-22 (about 5 years ago)

Other

Published
Title
Published
2025-01-16
Title
GMAPS for WPBakery Page Builder Free <= 1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published
2021-04-13
Title
Ultimate Addons for Elementor < 1.30.0 - Contributor+ Stored XSS
Published
2025-06-05
Title
RTMKit Addons for Elementor < 1.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published
2025-09-22
Title
JSM file_get_contents() Shortcode <= 2.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published
2024-04-16
Title
WordPress Menu Plugin — Superfly Responsive Menu <= 5.0.25 - Authenticated (Subscriber+) Stored Cross-Site Scripting