WordPress Plugin Vulnerabilities

WP Statistics <= 9.5.1 - Referer Cross-Site Scripting (XSS)

Description

The WP Statistics WordPress plugin was affected by a Referer Cross-Site Scripting (XSS) security vulnerability.

Affects Plugins

Plugin icon
wp-statistics
Fixed in 9.5.2

References

URL
https://plugins.trac.wordpress.org/changeset/1215995

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79

Miscellaneous

Submitter
ethicalhack3r
Submitter twitter
ethicalhack3r
Verified
No
WPVDB ID
88537332-f7af-4cc0-8ca9-e0345bec4959

Timeline

Publicly Published
2015-08-10 (about 10 years ago)
Added
2015-08-10 (about 10 years ago)
Last Updated
2019-10-22 (about 6 years ago)

Other

Published
Title
Published
2025-11-24
Title
Inline frame – Iframe <= 0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Published
2024-02-07
Title
Elementor Addons by Livemesh < 8.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published
2014-08-01
Title
mTouch Quiz 3.0.6 - question.php quiz Parameter Reflected XSS
Published
2014-08-01
Title
WP125 <= 1.4.4 - Multiple XSS
Published
2024-03-25
Title
Hot Random Image < 1.8.2 - Authenticated (Contributor+) Stored Cross-Site Scripting