Wassup Real Time Analytics Project

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Wassup Real Time Analytics Project records in CISA KEV

No Wassup Real Time Analytics Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Wassup Real Time Analytics 2 records LOW

Records

2 records

TI-2016-08957 CVE-2016-10919 · GHSA-84fc-964v-m8w8

The wassup plugin before 1.9.1 for WordPress has XSS via the Top stats widget or the…

LOW 29

The wassup plugin before 1.9.1 for WordPress has XSS via the Top stats widget or the wassupURI::add_siteurl method, a different vulnerability than CVE-2012-2633.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00923 Published 2019-08-22 No fix listed CWE-79

TI-2023-05200 CVE-2023-5653 · GHSA-4q47-vc82-p724

WassUp Real Time Analytics <= 1.9.4.5 - Unauthenticated Stored XSS

LOW 28

The WassUp Real Time Analytics WordPress plugin through 1.9.4.5 does not escape IP address provided via some headers before outputting them back in an admin page, allowing unauthenticated users to perform Stored XSS atta…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0051 Published 2023-11-27 No fix listed CWE-79

Open these records in search →

Critical	0
High	0
Medium	2
Low	0
No CVSS	0