Vulnerabilities > CVE-2022-25148 - Unspecified vulnerability in Veronalabs WP Statistics

CVSS 0.0 - NONE

Attack vector

UNKNOWN

Attack complexity

UNKNOWN

Privileges required

UNKNOWN

Confidentiality impact

UNKNOWN

Integrity impact

UNKNOWN

Availability impact

UNKNOWN

veronalabs

NVD

Published: 2022-02-24

Updated: 2024-11-21

Summary

The WP Statistics WordPress plugin is vulnerable to SQL Injection due to insufficient escaping and parameterization of the current_page_id parameter found in the ~/includes/class-wp-statistics-hits.php file which allows attackers without authentication to inject arbitrary SQL queries to obtain sensitive information, in versions up to and including 13.1.5.

Vulnerable Configurations

Part	Description	Count
Application	Veronalabs Veronalabs WP Statistics 1.0 Veronalabs WP Statistics 2.0 Veronalabs WP Statistics 2.1 Veronalabs WP Statistics 2.1.1 Veronalabs WP Statistics 2.1.2 Veronalabs WP Statistics 2.1.3 Veronalabs WP Statistics 2.1.4 Veronalabs WP Statistics 2.1.5 Veronalabs WP Statistics 2.1.6 Veronalabs WP Statistics 2.2.0 Veronalabs WP Statistics 2.2.1 Veronalabs WP Statistics 2.2.2 Veronalabs WP Statistics 2.2.3 Veronalabs WP Statistics 2.2.4 Veronalabs WP Statistics 2.2.5 Veronalabs WP Statistics 2.2.6 Veronalabs WP Statistics 2.2.7 Veronalabs WP Statistics 2.2.8 Veronalabs WP Statistics 2.2.9 Veronalabs WP Statistics 2.3.0 Veronalabs WP Statistics 2.3.1 Veronalabs WP Statistics 2.3.2 Veronalabs WP Statistics 2.3.3 Veronalabs WP Statistics 2.6.5 Veronalabs WP Statistics 3.0 Veronalabs WP Statistics 3.0.1 Veronalabs WP Statistics 3.0.2 Veronalabs WP Statistics 3.1.0 Veronalabs WP Statistics 3.1.1 Veronalabs WP Statistics 3.1.2 Veronalabs WP Statistics 3.1.3 Veronalabs WP Statistics 3.1.4 Veronalabs WP Statistics 3.2 Veronalabs WP Statistics 4.0 Veronalabs WP Statistics 4.1 Veronalabs WP Statistics 4.2 Veronalabs WP Statistics 4.3 Veronalabs WP Statistics 4.3.1 Veronalabs WP Statistics 4.4 Veronalabs WP Statistics 4.5 Veronalabs WP Statistics 4.6 Veronalabs WP Statistics 4.6.1 Veronalabs WP Statistics 4.7 Veronalabs WP Statistics 4.8 Veronalabs WP Statistics 4.8.1 Veronalabs WP Statistics 5.0 Veronalabs WP Statistics 5.1 Veronalabs WP Statistics 5.2 Veronalabs WP Statistics 5.3 Veronalabs WP Statistics 5.4 Veronalabs WP Statistics 6.0 Veronalabs WP Statistics 6.1 Veronalabs WP Statistics 7.0 Veronalabs WP Statistics 7.0.1 Veronalabs WP Statistics 7.0.2 Veronalabs WP Statistics 7.0.3 Veronalabs WP Statistics 7.0.4 Veronalabs WP Statistics 7.1 Veronalabs WP Statistics 7.2 Veronalabs WP Statistics 7.3 Veronalabs WP Statistics 7.4 Veronalabs WP Statistics 8.0 Veronalabs WP Statistics 8.1 Veronalabs WP Statistics 8.1.1 Veronalabs WP Statistics 8.2 Veronalabs WP Statistics 8.3 Veronalabs WP Statistics 8.3.1 Veronalabs WP Statistics 8.4 Veronalabs WP Statistics 8.5 Veronalabs WP Statistics 8.5.1 Veronalabs WP Statistics 8.6 Veronalabs WP Statistics 8.6.1 Veronalabs WP Statistics 8.6.2 Veronalabs WP Statistics 8.6.3 Veronalabs WP Statistics 8.7 Veronalabs WP Statistics 8.7.1 Veronalabs WP Statistics 8.7.2 Veronalabs WP Statistics 8.8 Veronalabs WP Statistics 8.8.1 Veronalabs WP Statistics 9.0 Veronalabs WP Statistics 9.1 Veronalabs WP Statistics 9.1.1 Veronalabs WP Statistics 9.1.2 Veronalabs WP Statistics 9.1.3 Veronalabs WP Statistics 9.2 Veronalabs WP Statistics 9.3 Veronalabs WP Statistics 9.3.1 Veronalabs WP Statistics 9.4 Veronalabs WP Statistics 9.4.1 Veronalabs WP Statistics 9.5 Veronalabs WP Statistics 9.5.1 Veronalabs WP Statistics 9.5.2 Veronalabs WP Statistics 9.5.3 Veronalabs WP Statistics 9.6 Veronalabs WP Statistics 9.6.1 Veronalabs WP Statistics 9.6.2 Veronalabs WP Statistics 9.6.3 Veronalabs WP Statistics 9.6.4 Veronalabs WP Statistics 9.6.5 Veronalabs WP Statistics 9.6.6 Veronalabs WP Statistics 9.7 Veronalabs WP Statistics 10.0 Veronalabs WP Statistics 10.0.1 Veronalabs WP Statistics 10.0.2 Veronalabs WP Statistics 10.0.3 Veronalabs WP Statistics 10.0.4 Veronalabs WP Statistics 10.0.5 Veronalabs WP Statistics 10.1 Veronalabs WP Statistics 10.2 Veronalabs WP Statistics 10.3 Veronalabs WP Statistics 11.0 Veronalabs WP Statistics 11.0.1 Veronalabs WP Statistics 11.0.2 Veronalabs WP Statistics 11.0.3 Veronalabs WP Statistics 12.0 Veronalabs WP Statistics 12.0.1 Veronalabs WP Statistics 12.0.2 Veronalabs WP Statistics 12.0.3 Veronalabs WP Statistics 12.0.4 Veronalabs WP Statistics 12.0.5 Veronalabs WP Statistics 12.0.6 Veronalabs WP Statistics 12.0.7 Veronalabs WP Statistics 12.0.8 Veronalabs WP Statistics 12.0.8.1 Veronalabs WP Statistics 12.0.9 Veronalabs WP Statistics 12.0.10 Veronalabs WP Statistics 12.0.11 Veronalabs WP Statistics 12.0.12 Veronalabs WP Statistics 12.0.12.1 Veronalabs WP Statistics 12.1.0 Veronalabs WP Statistics 12.1.1 Veronalabs WP Statistics 12.1.2 Veronalabs WP Statistics 12.1.3 Veronalabs WP Statistics 12.2 Veronalabs WP Statistics 12.3 Veronalabs WP Statistics 12.3.1 Veronalabs WP Statistics 12.3.2 Veronalabs WP Statistics 12.3.3 Veronalabs WP Statistics 12.3.4 Veronalabs WP Statistics 12.3.5 Veronalabs WP Statistics 12.3.6 Veronalabs WP Statistics 12.3.6.1 Veronalabs WP Statistics 12.3.6.2 Veronalabs WP Statistics 12.3.6.4 Veronalabs WP Statistics 12.4.0 Veronalabs WP Statistics 12.4.1 Veronalabs WP Statistics 12.4.3 Veronalabs WP Statistics 12.5 Veronalabs WP Statistics 12.5.1 Veronalabs WP Statistics 12.5.2 Veronalabs WP Statistics 12.5.3 Veronalabs WP Statistics 12.5.4 Veronalabs WP Statistics 12.5.5 Veronalabs WP Statistics 12.5.6 Veronalabs WP Statistics 12.5.7 Veronalabs WP Statistics 12.6 Veronalabs WP Statistics 12.6.1 Veronalabs WP Statistics 12.6.2 Veronalabs WP Statistics 12.6.3 Veronalabs WP Statistics 12.6.4 Veronalabs WP Statistics 12.6.5 Veronalabs WP Statistics 12.6.6 Veronalabs WP Statistics 13.0.2 Veronalabs WP Statistics 13.0.3 Veronalabs WP Statistics 13.0.4 Veronalabs WP Statistics 13.0.5 Veronalabs WP Statistics 13.0.6 Veronalabs WP Statistics 13.0.7 Veronalabs WP Statistics 13.0.8 Veronalabs WP Statistics 13.0.9 Veronalabs WP Statistics 13.1 Veronalabs WP Statistics 13.1.1 Veronalabs WP Statistics 13.1.2 Veronalabs WP Statistics 13.1.3 Veronalabs WP Statistics 13.1.4 Veronalabs WP Statistics 13.1.5	176

Summary

Vulnerable Configurations

References