Skip to content
Sign in
Not rated

CVE-2023-0630 The Slimstat Analytics WordPress plugin before 4.9.3.3 does not prevent subscribers from rendering shortcodes that…

Description

The Slimstat Analytics WordPress plugin before 4.9.3.3 does not prevent subscribers from rendering shortcodes that concatenates attributes directly into an SQL query.

Affected products and versions

Product Affected versions Fixed in
Slimstat Analytics 4.1 4.1 → < 4.9.3.3 4.9.3.3

Other CVEs of Slimstat Analytics

The 3 CVEs of Slimstat Analytics →
CVE-2026-12592 The SlimStat Analytics WordPress plugin before 5.5.0 does not escape a visitor-controlled geolocation value before… 7.5 High CVE-2022-4310 The Slimstat Analytics WordPress plugin before 4.9.3 does not sanitise and escape the URI when logging requests, which… 6.1 Medium
Track this CVE