Skip to content

Known CVE

WordPress Visitor Statistics (Real Time Traffic) <4.8 -SQL Injection

WordPress Visitor Statistics (Real Time Traffic) plugin before 4.8 does not properly sanitize and escape the refUrl in the refDetails AJAX action, which is available to any authenticated user. This could allow users with a role as low as subscriber to perform SQL injection attacks.

CVE-2021-24750

High2021CVSS 8.8CWE-89

cve2021 · authenticated · wpscan · sqli · wp · wordpress · wp-plugin · wp_visitor_statistics_\(real_time_traffic\)_project

Verified scans run this check after you prove you own the site.

All known CVEsView the checks catalogNational Vulnerability Database

Scan a website