CVE-2023-0955

Katalog CVE

CVSS 8.8 · High EPSS 0,90%

Kerentanan pada veronalabs wp statistics. Skor CVSS 3.1 8.8 (High) menurut NVD.

Deskripsi (NVD)

The WP Statistics WordPress plugin before 14.0 does not escape a parameter, which could allow authenticated users to perform SQL Injection attacks. By default, the affected feature is available to users with the manage_options capability (admin+), however the plugin has a settings to allow low privilege users to access it as well.

Rincian

Terbit di NVD

27 Maret 2023

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

8.8 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

EPSS (30 hari)

0,90% peluang dieksploitasi; lebih tinggi dari 58,5% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://wpscan.com/vulnerability/18b7e93f-b038-4f28-918b-4015d62f0eb8 exploit · advisory pihak ketiga