CODEPRESS records
7 published records for vendor codepress.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 14.3%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')4
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor1
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1
- CWE-862 Missing Authorization1
The weakness classes this vendor ships most often: where to look.
CWEAll records
7 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
46Plan | CVE-2021-24750Proof of concept | WP Visitor Statistics (Real Time Traffic) < 4.8 - Subscriber+ SQL Injectioncodepress · visitor statistics · CWE-89 | High8.8 | — | 38.3% | Dec 21, 2021 |
40Plan | CVE-2022-33965Proof of concept | WordPress WP Visitor Statistics plugin <= 5.7 - Multiple Unauthenticated SQL Injection (SQLi) vulnerabilitiescodepress · visitor statistics · CWE-89 | Critical9.8 | — | 4.4% | Jul 25, 2022 |
40Plan | CVE-2023-0600Proof of concept | WP Visitor Statistics (Real Time Traffic) < 6.9 - Unauthenticated SQLicodepress · visitor statistics · CWE-89 | Critical9.8 | — | 4.2% | May 15, 2023 |
35Monitor | CVE-2022-0410No exploit | WP Visitor Statistics (Real Time Traffic) < 5.6 - Subscriber+ SQL Injectioncodepress · visitor statistics · CWE-89 | High8.8 | — | 1.3% | Mar 7, 2022 |
30Monitor | CVE-2024-24867No exploit | WordPress WP Stats Manager plugin <= 6.9.4 - Sensitive Data Exposure vulnerabilitycodepress · visitor statistics · CWE-200 | High7.5 | — | 0.5% | Mar 17, 2024 |
21Monitor | CVE-2021-25042No exploit | WP Visitor Statistics (Real Time Traffic) < 5.5 - Arbitrary IP Address Exclusion to Stored XSScodepress · visitor statistics · CWE-862 | Medium5.4 | — | 0.5% | Feb 28, 2022 |
21Monitor | CVE-2022-4656No exploit | WP Visitor Statistics (Real Time Traffic) < 6.5 - Contributor+ Stored XSS via Shortcodecodepress · visitor statistics · CWE-79 | Medium5.4 | — | 0.5% | Feb 13, 2023 |
- CVE-2021-2475046Plan
WP Visitor Statistics (Real Time Traffic) < 4.8 - Subscriber+ SQL Injection
HighCVSS 8.8Proof of conceptEPSS 38%codepress · visitor statisticsDec 21, 2021
- CVE-2022-3396540Plan
WordPress WP Visitor Statistics plugin <= 5.7 - Multiple Unauthenticated SQL Injection (SQLi) vulnerabilities
CriticalCVSS 9.8Proof of conceptEPSS 4%codepress · visitor statisticsJul 25, 2022
- CVE-2023-060040Plan
WP Visitor Statistics (Real Time Traffic) < 6.9 - Unauthenticated SQLi
CriticalCVSS 9.8Proof of conceptEPSS 4%codepress · visitor statisticsMay 15, 2023
- CVE-2022-041035Monitor
WP Visitor Statistics (Real Time Traffic) < 5.6 - Subscriber+ SQL Injection
HighCVSS 8.8No exploitEPSS 1%codepress · visitor statisticsMar 7, 2022
- CVE-2024-2486730Monitor
WordPress WP Stats Manager plugin <= 6.9.4 - Sensitive Data Exposure vulnerability
HighCVSS 7.5No exploitEPSS 0%codepress · visitor statisticsMar 17, 2024
- CVE-2021-2504221Monitor
WP Visitor Statistics (Real Time Traffic) < 5.5 - Arbitrary IP Address Exclusion to Stored XSS
MediumCVSS 5.4No exploitEPSS 1%codepress · visitor statisticsFeb 28, 2022
- CVE-2022-465621Monitor
WP Visitor Statistics (Real Time Traffic) < 6.5 - Contributor+ Stored XSS via Shortcode
MediumCVSS 5.4No exploitEPSS 0%codepress · visitor statisticsFeb 13, 2023