PT-2023-16392 · WordPress · Wp Visitor Statistics

Trần Quốc Trường An · Published 2023-05-15 · Updated 2025-01-24 · CVE-2023-0600

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions WP Visitor Statistics (Real Time Traffic) versions prior to 6.9

Description The issue allows unauthenticated visitors to conduct SQL Injection attacks due to the plugin not escaping user input which is concatenated to an SQL query.

Recommendations For versions prior to 6.9, update to version 6.9 or later to resolve the issue.

Exploit

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2023-0600

Affected Products

Wp Visitor Statistics

References · 6

• 🔥 https://wpscan.com/vulnerability/8f46df4d-cb80-4d66-846f-85faf2ea0ec4 · Exploit
• https://osv.dev/vulnerability/CVE-2023-0600 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-0600 · Security Note
• https://t.me/cibsecurity/64112 · Telegram Post
• https://t.me/cvenotify/108540 · Telegram Post
• https://t.me/cvenotify/50979 · Telegram Post