Extension WordPress
Vulnérabilités Visitor Traffic Real Time Statistics
Cette page rassemble les failles publiées pour Visitor Traffic Real Time Statistics, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Visitor Traffic Real Time Statistics
8 fiches
Visitor Traffic Real Time Statistics <= 8.4 – Unauthenticated Stored Cross-Site Scripting
The Visitor Traffic Real Time Statistics plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'page_title' parameter in all versions up to, and including, 8.4 due to insufficient input sanitization and output escaping. This makes it…
*-8.4
8.5
04/04/2026
Visitors Traffic Real Time Statistics <= 7.2 – Missing Authorization via multiple AJAX actions
The Visitors Traffic Real Time Statistics plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on multiple AJAX functions in versions up to, and including, 7.2. This makes it possible for…
*-7.2
7.3
07/11/2023
Visitor Traffic Real Time Statistics <= 6.7 – Missing Authorization to Information Disclosure
The Visitor Traffic Real Time Statistics plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on multiple AJAX functions in versions up to, and including, 6.7. This makes it possible for…
[*, 6.8)
6.9
05/06/2023
Visitor Traffic Real Time Statistics <= 3.8 – Subscriber+ SQL Injection
The Visitor Traffic Real Time Statistics WordPress plugin before 3.9 does not validate and escape user input passed to the today_traffic_index AJAX action (available to any authenticated users) before using it in a SQL statement, leading to an…
*-3.8
3.9
06/10/2021
Visitor Traffic Real Time Statistics <= 2.13 – Cross-Site Request Forgery to Arbitrary Plugin Installation/Activation
The Visitor Traffic Real Time Statistics Plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.13. This is due to missing or incorrect nonce validation on the 'cp_plugins_do_button_job_later_callback' AJAX action. This makes…
*-2.13
3.1
22/04/2021
Visitor Traffic Real Time Statistics <= 2.11 – Missing Authorization to Arbitrary Plugin Installation/Activation
Low privileged users can use the AJAX action 'cp_plugins_do_button_job_later_callback' in the Visitor Traffic Real Time Statistics WordPress plugin before 2.12, to install any plugin (including a specific version) from the WordPress repository, as well as activate arbitrary plugin…
*-2.11
2.12
22/04/2021
Visitor Traffic Real Time Statistics <= 1.13 – Cross-Site Request Forgery
The visitors-traffic-real-time-statistics plugin before 1.13 for WordPress has CSRF.
*-1.13
1.14
03/07/2019
Visitor Traffic Real Time Statistics <= 1.12 – Cross-Site Request Forgery
The visitors-traffic-real-time-statistics plugin before 1.12 for WordPress has CSRF in the settings page.
*-1.12
1.13
03/07/2019
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.