Back to search
CVE-2021-24829
Published: Nov 8, 2021
Modified: Aug 3, 2024
PUBLISHED
Description
The Visitor Traffic Real Time Statistics WordPress plugin before 3.9 does not validate and escape user input passed to the today_traffic_index AJAX action (available to any authenticated users) before using it in a SQL statement, leading to an SQL injection issue
| Vendor | Product | Versions |
|---|---|---|
Unknown | Visitor Traffic Real Time Statistics | affected 3.9 - < 3.9 |
Weaknesses (CWE)
References
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now