Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: hk1993 Component: Wp Online Users Stats Clear all filters
TI-2025-04449 CVE-2025-4964 · GHSA-6c33-6542-ppw5

WP Online Users Stats <= 1.0.0 - Authenticated (Editor+) SQL Injection via table_name Parameter

Priority LOW 23

The WP Online Users Stats plugin for WordPress is vulnerable to time-based SQL Injection via the ‘table_name’ parameter in all versions up to, and including, 1.0.0 due to insufficient escaping on the user supplied parame…

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.0039 Published 2025-06-06 No fix listed CWE-89
TI-2025-04451 CVE-2025-4966 · GHSA-5qvf-h4p6-mc54

Cross-site request forgery in hk1993 WP Online Users Stats

Priority LOW 26

The WP Online Users Stats plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.0.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00167 Published 2025-06-06 No fix listed CWE-352