Vulnerabilities

TI-2025-17311 CVE-2025-23544 · GHSA-f8jg-7qwp-x4x6

WordPress StatPressCN plugin <= 1.9.1 - Reflected Cross Site Scripting (XSS) vulnerability

LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in heart5 StatPressCN statpresscn allows Reflected XSS.This issue affects StatPressCN: from n/a through <= 1.9.1.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00266 Published 2025-01-23 No fix listed CWE-79

TI-2011-00558 CVE-2011-0641 · GHSA-rgj5-vhq5-p9jc

Multiple cross-site scripting (XSS) vulnerabilities in wp-admin/admin.php in the…

LOW 24

Multiple cross-site scripting (XSS) vulnerabilities in wp-admin/admin.php in the StatPressCN plugin 1.9.0 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) what1, (2) what2, (3) what…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.0183 Published 2011-01-25 No fix listed CWE-79

Vulnerabilities

Filters

WordPress StatPressCN plugin <= 1.9.1 - Reflected Cross Site Scripting (XSS) vulnerability

Multiple cross-site scripting (XSS) vulnerabilities in wp-admin/admin.php in the…