CVE Database /
CVE-2017-18515
CVE · Critical
CVE-2017-18515 — WP Statistics – Simple, privacy-friendly Google Analytics alternative [wp-statistics] < 12.0.8
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2017-18515
|
WP Statistics – Simple, privacy-friendly Google Analytics alternative [wp-statistics] < 12.0.8 |
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') |
Critical
9.8
|
< 12.0.8
|
12.0.8 |
2017-06-30 |
—
|
CVE-2017-18515
The WP Statistics plugin versions before 12.0.8 contained an authenticated SQL injection vulnerability that allowed users with appropriate access to execute arbitrary SQL queries against the database. This flaw required authentication to exploit but could enable attackers with user accounts to manipulate or extract sensitive database information. The vulnerability was resolved in version 12.0.8 and later releases.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings