CVE-2022-0651
The WP Statistics WordPress plugin is vulnerable to SQL Injection due to insufficient escaping and parameterization of the current_page_type parameter found in the ~/includes/class-wp-statistics-hits.php file which allows attackers without…
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 32.2%, higher than 98% of all known CVEs. Patch or mitigate before the next change window.
Description
The WP Statistics WordPress plugin is vulnerable to SQL Injection due to insufficient escaping and parameterization of the current_page_type parameter found in the ~/includes/class-wp-statistics-hits.php file which allows attackers without authentication to inject arbitrary SQL queries to obtain sensitive information, in versions up to and including 13.1.5.
- CVSS 3.1
- 7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- EPSS
- 32.21% probability · 98th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-89
- Affected
- veronalabs/wp statistics
- Source
- security@wordfence.com
References
- https://gist.github.com/Xib3rR4dAr/5dbd58b7f57a5037fe461fba8e696042Exploit, Third Party Advisory
- https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2679983%40wp-statistics&new=2679983%40wp-statistics&sfp_email=&sfph_mail=Patch, Third Party Advisory
- https://www.wordfence.com/vulnerability-advisories/#CVE-2022-0651Third Party Advisory
- https://gist.github.com/Xib3rR4dAr/5dbd58b7f57a5037fe461fba8e696042Exploit, Third Party Advisory
- https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2679983%40wp-statistics&new=2679983%40wp-statistics&sfp_email=&sfph_mail=Patch, Third Party Advisory
- https://www.wordfence.com/vulnerability-advisories/#CVE-2022-0651Third Party Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.