Vulnerabilities

TI-2023-05200 CVE-2023-5653 · GHSA-4q47-vc82-p724

WassUp Real Time Analytics <= 1.9.4.5 - Unauthenticated Stored XSS

LOW 28

The WassUp Real Time Analytics WordPress plugin through 1.9.4.5 does not escape IP address provided via some headers before outputting them back in an admin page, allowing unauthenticated users to perform Stored XSS atta…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0051 Published 2023-11-27 No fix listed CWE-79

TI-2016-08957 CVE-2016-10919 · GHSA-84fc-964v-m8w8

The wassup plugin before 1.9.1 for WordPress has XSS via the Top stats widget or the…

LOW 29

The wassup plugin before 1.9.1 for WordPress has XSS via the Top stats widget or the wassupURI::add_siteurl method, a different vulnerability than CVE-2012-2633.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00923 Published 2019-08-22 No fix listed CWE-79

Vulnerabilities

Filters

WassUp Real Time Analytics <= 1.9.4.5 - Unauthenticated Stored XSS

The wassup plugin before 1.9.1 for WordPress has XSS via the Top stats widget or the…