CVE-2022-0410

PoC —

CVSS 3.1

8.8 high

EPSS

1%p69

Published

Mar 7, 2022 (Mar 7, 2022)

Modified

Jun 17, 2026

Description

The WP Visitor Statistics (Real Time Traffic) WordPress plugin before 5.6 does not sanitise and escape the id parameter before using it in a SQL statement via the refUrlDetails AJAX action, available to any authenticated user, leading to a SQL injection

Vendors: codepress
Products: visitor statistics
Ecosystems: WordPress
Weakness: CWE-89
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.3%)

In the news0 stories

No ingested article mentions this CVE yet.