CVE-2022-45373highCWE-89

CVE-2022-45373: high-severity vulnerability in Jason Crouse, VeronaLabs Slimstat Analytics

WordPress Slimstat Analytics Plugin <= 5.0.4 is vulnerable to SQL Injection

Published · Updated

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 8.8epss 0.5%
exploitation probability
0.5%top 58% of all CVEs
observed exploitation
nono source reports it
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Jason Crouse, VeronaLabs Slimstat Analytics allows SQL Injection.This issue affects Slimstat Analytics: from n/a through 5.0.4.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:L
Affected products
Jason Crouse, VeronaLabs · Slimstat Analytics
Related CVEs — Jason Crouse, VeronaLabs Slimstat Analytics

In the same product, most dangerous first.

CVE-2023-40676MEDIUMWordPress Slimstat Analytics Plugin <= 5.0.8 is vulnerable to Cross Site Scripting (XSS)EPSS 0.4%CVE-2022-45366HIGHWordPress Slimstat Analytics Plugin <= 5.0.4 is vulnerable to Cross Site Scripting (XSS)EPSS 0.4%
References
https://patchstack.com/database/vulnerability/wp-slimstat/wordpress-slimstat-analytics-plugin-5-0-4-sql-injection-sqli-vulnerability?_s_id=cve