Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

10 records

Vendor: Newstatpress Project Clear all filters
TI-2017-14160 CVE-2017-20094 · GHSA-65pg-wc47-9p36

NewStatPress Plugin Persistent cross site scriting

Priority MEDIUM 58

A vulnerability, which was classified as problematic, has been found in NewStatPress Plugin 1.2.4.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00593 Published 2022-06-24 No fix listed CWE-80
TI-2022-00143 CVE-2022-0206 · GHSA-rp96-45rp-9v6p

NewStatPress < 1.3.6 - Reflected Cross-Site Scripting

Priority LOW 30

The NewStatPress WordPress plugin before 1.3.6 does not properly escape the whatX parameters before outputting them back in attributes, leading to Reflected Cross-Site Scripting issues

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01446 Published 2022-02-14 Fixed in 1.3.6 CWE-79
TI-2015-03424 CVE-2015-4063 · GHSA-px77-jg6r-fh7m

Cross-site scripting (XSS) vulnerability in includes/nsp_search.php in the NewStatPress…

Priority LOW 26

Cross-site scripting (XSS) vulnerability in includes/nsp_search.php in the NewStatPress plugin before 0.9.9 for WordPress allows remote authenticated users to inject arbitrary web script or HTML via the where1 parameter…

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.06094 Published 2015-05-27 No fix listed CWE-79
TI-2015-03423 CVE-2015-4062 · GHSA-wjfc-gqqw-4c33

SQL injection vulnerability in includes/nsp_search.php in the NewStatPress plugin before…

Priority MEDIUM 41

SQL injection vulnerability in includes/nsp_search.php in the NewStatPress plugin before 0.9.9 for WordPress allows remote authenticated users to execute arbitrary SQL commands via the where1 parameter in the nsp_search…

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.09292 Published 2015-05-27 No fix listed CWE-89