WordPress Plugin Vulnerabilities

Newstatpress < 1.0.1 - SQL Injection

Description

The NewStatPress WordPress plugin was affected by a SQL Injection security vulnerability.

Affects Plugins

Plugin icon
newstatpress
Fixed in 1.0.1

References

CVE
CVE-2015-9315

Classification

Type
SQLI
OWASP top 10
A1: Injection
CWE
CWE-89
CVSS
9.8 (critical)

Miscellaneous

Verified
No
WPVDB ID
ce18c982-5ab3-470c-ae00-39d07d2a91a1

Timeline

Publicly Published
2015-06-08 (about 8 years ago)
Added
2019-08-25 (about 4 years ago)
Last Updated
2020-09-22 (about 3 years ago)

Other

Published
Title
Published
2017-11-03
Title
Active Directory Integration <= 1.1.8 - Authenticated SQL Injection
Published
2024-02-09
Title
Awesome Support – WordPress HelpDesk & Support Plugin < 6.1.8 - Authenticated (Subscriber+) SQL Injection
Published
2014-08-01
Title
GD Star Rating 1.9.22 - SQL Injection
Published
2014-08-01
Title
Website FAQ 1.0 - wp-admin/admin-ajax.php category Parameter SQL injection
Published
2024-02-06
Title
Podlove Subscribe button < 1.3.11 - Authenticated (Contributor+) SQL Injection