CVE-2021-24750
high · 8.8A public exploit / detection template exists
Weaponised detection is publicly available, which meaningfully raises real-world risk regardless of CVSS. nuclei-templates →
The WP Visitor Statistics (Real Time Traffic) WordPress plugin before 4.8 does not properly sanitise and escape the refUrl in the refDetails AJAX action, available to any authenticated user, which could allow users with a role as low as subscriber to perform SQL injection attacks
8.8
CVSS
38.3%
EPSS (exploit prob.)
98th
EPSS percentile
2021-12-21
Published
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-89
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| codepress | visitor_statistics | < 4.8 |
Check a specific version with /api/v1/cve/match.
References
- http://packetstormsecurity.com/files/165433/WordPress-WP-Visitor-Statistics-4.7-SQL-Injection.html
- https://plugins.trac.wordpress.org/changeset/2622268
- https://wpscan.com/vulnerability/7528aded-b8c9-4833-89d6-9cd7df3620de
- http://packetstormsecurity.com/files/165433/WordPress-WP-Visitor-Statistics-4.7-SQL-Injection.html
- https://plugins.trac.wordpress.org/changeset/2622268
- https://wpscan.com/vulnerability/7528aded-b8c9-4833-89d6-9cd7df3620de
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2021-24750