CVE Database /
CVE-2022-0513
CVE · High
CVE-2022-0513 — WP Statistics – Simple, privacy-friendly Google Analytics alternative [wp-statistics] < 13.1.5
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2022-0513
|
WP Statistics – Simple, privacy-friendly Google Analytics alternative [wp-statistics] < 13.1.5 |
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') |
High
7.5
|
< 13.1.5
|
13.1.5 |
2022-02-10 |
—
|
CVE-2022-0513
The WP Statistics plugin before version 13.1.5 contains a SQL injection vulnerability in the exclusion_reason parameter within the exclusion handler that allows unauthenticated attackers to execute arbitrary SQL queries when the "Record Exclusions" feature is enabled. The flaw stems from inadequate escaping and parameterization of user input in the affected code. An attacker could exploit this to extract sensitive data from the site's database.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings