CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-24750

The WP Visitor Statistics (Real Time Traffic) WordPress plugin before 4.8 does not properly sanitise and escape the refUrl in the refDetails AJAX action, available to any authenticated user, which could allow users with a role as low as subscriber to perform SQL injection attacks

Exploit prediction scoring system (EPSS) score

EPSS Score 0.695

EPSS Ranking 98.7%

CVSS Severity

CVSS v3 Score 8.8

CVSS v2 Score 6.5

References

Products affected by CVE-2021-24750

Codepress » Visitor Statistics » Version: N/A

cpe:2.3:a:codepress:visitor_statistics:-
Codepress » Visitor Statistics » Version: 1.0

cpe:2.3:a:codepress:visitor_statistics:1.0
Codepress » Visitor Statistics » Version: 1.1

cpe:2.3:a:codepress:visitor_statistics:1.1
Codepress » Visitor Statistics » Version: 1.2

cpe:2.3:a:codepress:visitor_statistics:1.2
Codepress » Visitor Statistics » Version: 1.3

cpe:2.3:a:codepress:visitor_statistics:1.3
Codepress » Visitor Statistics » Version: 1.4

cpe:2.3:a:codepress:visitor_statistics:1.4
Codepress » Visitor Statistics » Version: 1.5

cpe:2.3:a:codepress:visitor_statistics:1.5
Codepress » Visitor Statistics » Version: 1.6

cpe:2.3:a:codepress:visitor_statistics:1.6
Codepress » Visitor Statistics » Version: 1.7

cpe:2.3:a:codepress:visitor_statistics:1.7
Codepress » Visitor Statistics » Version: 1.8

cpe:2.3:a:codepress:visitor_statistics:1.8
Codepress » Visitor Statistics » Version: 1.9

cpe:2.3:a:codepress:visitor_statistics:1.9
Codepress » Visitor Statistics » Version: 2.1

cpe:2.3:a:codepress:visitor_statistics:2.1
Codepress » Visitor Statistics » Version: 2.2

cpe:2.3:a:codepress:visitor_statistics:2.2
Codepress » Visitor Statistics » Version: 2.3

cpe:2.3:a:codepress:visitor_statistics:2.3
Codepress » Visitor Statistics » Version: 2.4

cpe:2.3:a:codepress:visitor_statistics:2.4
Codepress » Visitor Statistics » Version: 2.5

cpe:2.3:a:codepress:visitor_statistics:2.5
Codepress » Visitor Statistics » Version: 2.6

cpe:2.3:a:codepress:visitor_statistics:2.6
Codepress » Visitor Statistics » Version: 2.7

cpe:2.3:a:codepress:visitor_statistics:2.7
Codepress » Visitor Statistics » Version: 2.8

cpe:2.3:a:codepress:visitor_statistics:2.8
Codepress » Visitor Statistics » Version: 2.9

cpe:2.3:a:codepress:visitor_statistics:2.9
Codepress » Visitor Statistics » Version: 3.1

cpe:2.3:a:codepress:visitor_statistics:3.1
Codepress » Visitor Statistics » Version: 3.10

cpe:2.3:a:codepress:visitor_statistics:3.10
Codepress » Visitor Statistics » Version: 3.11

cpe:2.3:a:codepress:visitor_statistics:3.11
Codepress » Visitor Statistics » Version: 3.12

cpe:2.3:a:codepress:visitor_statistics:3.12
Codepress » Visitor Statistics » Version: 3.13

cpe:2.3:a:codepress:visitor_statistics:3.13
Codepress » Visitor Statistics » Version: 3.14

cpe:2.3:a:codepress:visitor_statistics:3.14
Codepress » Visitor Statistics » Version: 3.15

cpe:2.3:a:codepress:visitor_statistics:3.15
Codepress » Visitor Statistics » Version: 3.16

cpe:2.3:a:codepress:visitor_statistics:3.16
Codepress » Visitor Statistics » Version: 3.17

cpe:2.3:a:codepress:visitor_statistics:3.17
Codepress » Visitor Statistics » Version: 3.18

cpe:2.3:a:codepress:visitor_statistics:3.18
Codepress » Visitor Statistics » Version: 3.2

cpe:2.3:a:codepress:visitor_statistics:3.2
Codepress » Visitor Statistics » Version: 3.3

cpe:2.3:a:codepress:visitor_statistics:3.3
Codepress » Visitor Statistics » Version: 3.4

cpe:2.3:a:codepress:visitor_statistics:3.4
Codepress » Visitor Statistics » Version: 3.5

cpe:2.3:a:codepress:visitor_statistics:3.5
Codepress » Visitor Statistics » Version: 3.6

cpe:2.3:a:codepress:visitor_statistics:3.6
Codepress » Visitor Statistics » Version: 3.7

cpe:2.3:a:codepress:visitor_statistics:3.7
Codepress » Visitor Statistics » Version: 3.8

cpe:2.3:a:codepress:visitor_statistics:3.8
Codepress » Visitor Statistics » Version: 3.9

cpe:2.3:a:codepress:visitor_statistics:3.9
Codepress » Visitor Statistics » Version: 4.1

cpe:2.3:a:codepress:visitor_statistics:4.1
Codepress » Visitor Statistics » Version: 4.2

cpe:2.3:a:codepress:visitor_statistics:4.2
Codepress » Visitor Statistics » Version: 4.3

cpe:2.3:a:codepress:visitor_statistics:4.3
Codepress » Visitor Statistics » Version: 4.4

cpe:2.3:a:codepress:visitor_statistics:4.4
Codepress » Visitor Statistics » Version: 4.5

cpe:2.3:a:codepress:visitor_statistics:4.5
Codepress » Visitor Statistics » Version: 4.6

cpe:2.3:a:codepress:visitor_statistics:4.6
Codepress » Visitor Statistics » Version: 4.7

cpe:2.3:a:codepress:visitor_statistics:4.7

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-24750

Products

Pricing

Contact Us