The WP Statistics plugin for WordPress has a bug in versions before 12.0.9 which makes it vulnerable to attack. If someone is able to get you to click on a link, they can inject malicious web scripts into the page which can then be executed. This is because the plugin doesn’t properly check the input it takes in or properly protect the output it sends out.
This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!
Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:
> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21
Is this information incorrect? Please leave us a message.
