Not rated
CVE-2021-24829 The Visitor Traffic Real Time Statistics WordPress plugin before 3.9 does not validate and escape user input passed to…
Description
The Visitor Traffic Real Time Statistics WordPress plugin before 3.9 does not validate and escape user input passed to the today_traffic_index AJAX action (available to any authenticated users) before using it in a SQL statement, leading to an SQL injection issue
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Visitor Traffic Real Time Statistics 3.9 | earliest → < 3.9 | 3.9 |