Vulnerabilities > CVE-2021-24340 - Unspecified vulnerability in Veronalabs WP Statistics

CVSS 7.5 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

HIGH

Integrity impact

NONE

Availability impact

NONE

network

low complexity

veronalabs

NVD

Published: 2021-06-07

Updated: 2024-11-21

Summary

The WP Statistics WordPress plugin before 13.0.8 relied on using the WordPress esc_sql() function on a field not delimited by quotes and did not first prepare the query. Additionally, the page, which should have been accessible to administrator only, was also available to any visitor, including unauthenticated ones.

Vulnerable Configurations

Part	Description	Count
Application	Veronalabs Veronalabs WP Statistics 1.0 Veronalabs WP Statistics 2.0 Veronalabs WP Statistics 2.1 Veronalabs WP Statistics 2.1.1 Veronalabs WP Statistics 2.1.2 Veronalabs WP Statistics 2.1.3 Veronalabs WP Statistics 2.1.4 Veronalabs WP Statistics 2.1.5 Veronalabs WP Statistics 2.1.6 Veronalabs WP Statistics 2.2.0 Veronalabs WP Statistics 2.2.1 Veronalabs WP Statistics 2.2.2 Veronalabs WP Statistics 2.2.3 Veronalabs WP Statistics 2.2.4 Veronalabs WP Statistics 2.2.5 Veronalabs WP Statistics 2.2.6 Veronalabs WP Statistics 2.2.7 Veronalabs WP Statistics 2.2.8 Veronalabs WP Statistics 2.2.9 Veronalabs WP Statistics 2.3.0 Veronalabs WP Statistics 2.3.1 Veronalabs WP Statistics 2.3.2 Veronalabs WP Statistics 2.3.3 Veronalabs WP Statistics 2.6.5 Veronalabs WP Statistics 3.0 Veronalabs WP Statistics 3.0.1 Veronalabs WP Statistics 3.0.2 Veronalabs WP Statistics 3.1.0 Veronalabs WP Statistics 3.1.1 Veronalabs WP Statistics 3.1.2 Veronalabs WP Statistics 3.1.3 Veronalabs WP Statistics 3.1.4 Veronalabs WP Statistics 3.2 Veronalabs WP Statistics 4.0 Veronalabs WP Statistics 4.1 Veronalabs WP Statistics 4.2 Veronalabs WP Statistics 4.3 Veronalabs WP Statistics 4.3.1 Veronalabs WP Statistics 4.4 Veronalabs WP Statistics 4.5 Veronalabs WP Statistics 4.6 Veronalabs WP Statistics 4.6.1 Veronalabs WP Statistics 4.7 Veronalabs WP Statistics 4.8 Veronalabs WP Statistics 4.8.1 Veronalabs WP Statistics 5.0 Veronalabs WP Statistics 5.1 Veronalabs WP Statistics 5.2 Veronalabs WP Statistics 5.3 Veronalabs WP Statistics 5.4 Veronalabs WP Statistics 6.0 Veronalabs WP Statistics 6.1 Veronalabs WP Statistics 7.0 Veronalabs WP Statistics 7.0.1 Veronalabs WP Statistics 7.0.2 Veronalabs WP Statistics 7.0.3 Veronalabs WP Statistics 7.0.4 Veronalabs WP Statistics 7.1 Veronalabs WP Statistics 7.2 Veronalabs WP Statistics 7.3 Veronalabs WP Statistics 7.4 Veronalabs WP Statistics 8.0 Veronalabs WP Statistics 8.1 Veronalabs WP Statistics 8.1.1 Veronalabs WP Statistics 8.2 Veronalabs WP Statistics 8.3 Veronalabs WP Statistics 8.3.1 Veronalabs WP Statistics 8.4 Veronalabs WP Statistics 8.5 Veronalabs WP Statistics 8.5.1 Veronalabs WP Statistics 8.6 Veronalabs WP Statistics 8.6.1 Veronalabs WP Statistics 8.6.2 Veronalabs WP Statistics 8.6.3 Veronalabs WP Statistics 8.7 Veronalabs WP Statistics 8.7.1 Veronalabs WP Statistics 8.7.2 Veronalabs WP Statistics 8.8 Veronalabs WP Statistics 8.8.1 Veronalabs WP Statistics 9.0 Veronalabs WP Statistics 9.1 Veronalabs WP Statistics 9.1.1 Veronalabs WP Statistics 9.1.2 Veronalabs WP Statistics 9.1.3 Veronalabs WP Statistics 9.2 Veronalabs WP Statistics 9.3 Veronalabs WP Statistics 9.3.1 Veronalabs WP Statistics 9.4 Veronalabs WP Statistics 9.4.1 Veronalabs WP Statistics 9.5 Veronalabs WP Statistics 9.5.1 Veronalabs WP Statistics 9.5.2 Veronalabs WP Statistics 9.5.3 Veronalabs WP Statistics 9.6 Veronalabs WP Statistics 9.6.1 Veronalabs WP Statistics 9.6.2 Veronalabs WP Statistics 9.6.3 Veronalabs WP Statistics 9.6.4 Veronalabs WP Statistics 9.6.5 Veronalabs WP Statistics 9.6.6 Veronalabs WP Statistics 9.7 Veronalabs WP Statistics 10.0 Veronalabs WP Statistics 10.0.1 Veronalabs WP Statistics 10.0.2 Veronalabs WP Statistics 10.0.3 Veronalabs WP Statistics 10.0.4 Veronalabs WP Statistics 10.0.5 Veronalabs WP Statistics 10.1 Veronalabs WP Statistics 10.2 Veronalabs WP Statistics 10.3 Veronalabs WP Statistics 11.0 Veronalabs WP Statistics 11.0.1 Veronalabs WP Statistics 11.0.2 Veronalabs WP Statistics 11.0.3 Veronalabs WP Statistics 12.0 Veronalabs WP Statistics 12.0.1 Veronalabs WP Statistics 12.0.2 Veronalabs WP Statistics 12.0.3 Veronalabs WP Statistics 12.0.4 Veronalabs WP Statistics 12.0.5 Veronalabs WP Statistics 12.0.6 Veronalabs WP Statistics 12.0.7 Veronalabs WP Statistics 12.0.8 Veronalabs WP Statistics 12.0.8.1 Veronalabs WP Statistics 12.0.9 Veronalabs WP Statistics 12.0.10 Veronalabs WP Statistics 12.0.11 Veronalabs WP Statistics 12.0.12 Veronalabs WP Statistics 12.0.12.1 Veronalabs WP Statistics 12.1.0 Veronalabs WP Statistics 12.1.1 Veronalabs WP Statistics 12.1.2 Veronalabs WP Statistics 12.1.3 Veronalabs WP Statistics 12.2 Veronalabs WP Statistics 12.3 Veronalabs WP Statistics 12.3.1 Veronalabs WP Statistics 12.3.2 Veronalabs WP Statistics 12.3.3 Veronalabs WP Statistics 12.3.4 Veronalabs WP Statistics 12.3.5 Veronalabs WP Statistics 12.3.6 Veronalabs WP Statistics 12.3.6.1 Veronalabs WP Statistics 12.3.6.2 Veronalabs WP Statistics 12.3.6.4 Veronalabs WP Statistics 12.4.0 Veronalabs WP Statistics 12.4.1 Veronalabs WP Statistics 12.4.3 Veronalabs WP Statistics 12.5 Veronalabs WP Statistics 12.5.1 Veronalabs WP Statistics 12.5.2 Veronalabs WP Statistics 12.5.3 Veronalabs WP Statistics 12.5.4 Veronalabs WP Statistics 12.5.5 Veronalabs WP Statistics 12.5.6 Veronalabs WP Statistics 12.5.7 Veronalabs WP Statistics 12.6 Veronalabs WP Statistics 12.6.1 Veronalabs WP Statistics 12.6.2 Veronalabs WP Statistics 12.6.3 Veronalabs WP Statistics 12.6.4 Veronalabs WP Statistics 12.6.5 Veronalabs WP Statistics 12.6.6 Veronalabs WP Statistics 13.0.2 Veronalabs WP Statistics 13.0.3 Veronalabs WP Statistics 13.0.4 Veronalabs WP Statistics 13.0.5 Veronalabs WP Statistics 13.0.6 Veronalabs WP Statistics 13.0.7	168

Summary

Vulnerable Configurations

References