Vulnerability Details CVE-2015-9399
The wp-stats-dashboard plugin through 2.9.4 for WordPress has admin/graph_trend.php type SQL injection.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.007
EPSS Ranking 71.0%
CVSS Severity
CVSS v3 Score 7.2
CVSS v2 Score 6.5
References
- http://cinu.pl/research/wp-plugins/mail_468b117b2dc86cb3d2ae4b8c81884a99.html
- https://wordpress.org/plugins/wp-stats-dashboard/#developers
- https://wpvulndb.com/vulnerabilities/8316
- http://cinu.pl/research/wp-plugins/mail_468b117b2dc86cb3d2ae4b8c81884a99.html
- https://wordpress.org/plugins/wp-stats-dashboard/#developers
- https://wpvulndb.com/vulnerabilities/8316
Products affected by CVE-2015-9399
-
cpe:2.3:a:trivetechnology:wp-stats-dashboard:-
-
cpe:2.3:a:trivetechnology:wp-stats-dashboard:2.9.4