Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 14:06:14 +0000 CVE-2021-24750 — WP Visitor Statistics (Real Time Traffic) < 4.8 - Subscriber+ SQL Injection https://cve.radiocsirt.org/vuln/cve-2021-24750 <p><strong>Affected:</strong> Unknown WP Visitor Statistics (Real Time Traffic)</p> <p>The WP Visitor Statistics (Real Time Traffic) WordPress plugin before 4.8 does not properly sanitise and escape the refUrl in the refDetails AJAX action, available to any authenticated user, which could allow users with a role as low as subscriber to perform SQL injection attacks</p> <p><strong>Affected:</strong> Unknown WP Visitor Statistics (Real Time Traffic)</p> <p>The WP Visitor Statistics (Real Time Traffic) WordPress plugin before 4.8 does not properly sanitise and escape the refUrl in the refDetails AJAX action, available to any authenticated user, which could allow users with a role as low as subscriber to perform SQL injection attacks</p> https://cve.radiocsirt.org/vuln/cve-2021-24750