https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 25 Oct 2026 17:31:35 +0000 https://cve.radiocsirt.org/vuln/cnvd-2021-44300 cnvd-2021-44300 https://cve.radiocsirt.org/vuln/cnvd-2021-44300 https://cve.radiocsirt.org/vuln/euvd-2026-23717 EUVD-2026-23717 https://cve.radiocsirt.org/vuln/euvd-2026-23717 https://cve.radiocsirt.org/vuln/fkie_cve-2021-24340 <p>The WP Statistics WordPress plugin before 13.0.8 relied on using the WordPress esc_sql() function on a field not delimited by quotes and did not first prepare the query. Additionally, the page, which should have been accessible to administrator only, was also available to any visitor, including unauthenticated ones.</p> <p>The WP Statistics WordPress plugin before 13.0.8 relied on using the WordPress esc_sql() function on a field not delimited by quotes and did not first prepare the query. Additionally, the page, which should have been accessible to administrator only, was also available to any visitor, including unauthenticated ones.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-24340 https://cve.radiocsirt.org/vuln/ghsa-9mj4-xv45-qwq2 <p>The WP Statistics WordPress plugin before 13.0.8 relied on using the WordPress esc_sql() function on a field not delimited by quotes and did not first prepare the query. Additionally, the page, which should have been accessible to administrator only, was also available to any visitor, including unauthenticated ones.</p> <p>The WP Statistics WordPress plugin before 13.0.8 relied on using the WordPress esc_sql() function on a field not delimited by quotes and did not first prepare the query. Additionally, the page, which should have been accessible to administrator only, was also available to any visitor, including unauthenticated ones.</p> https://cve.radiocsirt.org/vuln/ghsa-9mj4-xv45-qwq2 https://cve.radiocsirt.org/vuln/gsd-2021-24340 gsd-2021-24340 https://cve.radiocsirt.org/vuln/gsd-2021-24340