CVE-2021-24750

The WP Visitor Statistics (Real Time Traffic) WordPress plugin before 4.8 does not properly sanitise and escape the refUrl in the refDetails AJAX action, available to any authenticated user, which could allow users with a role as low as subscriber to perform SQL injection attacks

CVSS v3.1

8.8 HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0

6.5 MEDIUMAV:N/AC:L/Au:S/C:P/I:P/A:P

EPSS

38.30% chance of exploitation in the next 30 days, 98th percentile

Nuclei

high · CWE-89

Published

2021-12-21

Updated

2024-08-03

Proof-of-concept exploits (3)

• http://packetstormsecurity.com/files/165433/WordPress-WP-Visitor-Statistics-4.7-SQL-Injec…
• https://wpscan.com/vulnerability/7528aded-b8c9-4833-89d6-9cd7df3620de
• fimtow/CVE-2021-247501★ · 2022-01-18

Nuclei templates (1)

• projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24750.yaml

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/50619

References

• CVE Record
• NVD entry

Related

• CVE-2021-24749
• CVE-2021-24751
• CVE-2021-24748
• CVE-2021-24752
• CVE-2021-24747
• CVE-2021-24753