CVE-2026-117572
INFO
Priority: 0.00
BB Relevance:
0/100
Published: 2026-10-30
Modified: 2026-10-30
First seen: 2026-10-30
Status: pending_score
Description
The WP Visitor Statistics (Real Time Traffic) WordPress plugin before 8.8 does not sanitize and escape a parameter before using it in a SQL statement, allowing high-privilege users such as administrators to perform SQL injection attacks.
Affected Software (1)
| Vendor | Product | Version |
|---|---|---|
| Unknown | WP Visitor Statistics (Real Time Traffic) | 0 < 8.8 |