WordPress Plugin Vulnerabilities

NewStatPress 0.9.8 - XSS & SQL Injection

Description

The NewStatPress WordPress plugin was affected by a XSS & SQL Injection security vulnerability.

Affects Plugins

Plugin icon
newstatpress
Fixed in 0.9.9

References

CVE
CVE-2015-4062
CVE
CVE-2015-4063
Exploitdb
37107
URL
https://packetstormsecurity.com/files/#132038/

Miscellaneous

Submitter
pvdl
Verified
No
WPVDB ID
a294163c-8a8d-49ea-8120-a512de141b68

Timeline

Publicly Published
2015-05-25 (about 10 years ago)
Added
2015-05-26 (about 10 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2016-04-17
Title
Kento Post View Counter <= 2.8 - CSRF & multiple XSS
Published
2018-11-05
Title
Media File Manager <= 1.4.2 - Authenticated Multiple Vulnerabilities
Published
2015-08-31
Title
Thumbnail Carousel Slider < 1.0.1 - Authenticated Shell Upload & CSRF
Published
2014-08-01
Title
Google Maps via Store Locator - Multiple Vulnerabilities
Published
2015-10-15
Title
Events Made Easy < 1.5.50 - Multi CSRF to Stored Cross-Site Scripting & Event Deletion