CVE-2025-67983: falha de média gravidade em osama.esh WP Visitor Statistics (Real Time…
WordPress WP Visitor Statistics (Real Time Traffic) plugin <= 8.3 - Cross Site Scripting (XSS) vulnerability
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 6.5epss 0.2%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in osama.esh WP Visitor Statistics (Real Time Traffic) wp-stats-manager allows DOM-Based XSS.This issue affects WP Visitor Statistics (Real Time Traffic): from n/a through <= 8.3.
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L
Produtos afetados
osama.esh · WP Visitor Statistics (Real Time Traffic)CVEs relacionadas — osama.esh WP Visitor Statistics (Real Time…
No mesmo produto, das mais perigosas para as menos.
CVE-2025-49400CRITICALWordPress WP Visitor Statistics (Real Time Traffic) Plugin <= 8.2 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.5%CVE-2025-49996MEDIUMWordPress WP Visitor Statistics (Real Time Traffic) plugin <= 8.4 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2025-24675MEDIUMWordPress WP Visitor Statistics (Real Time Traffic) plugin <= 7.2 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.4%CVE-2025-22304MEDIUMWordPress WP Visitor Statistics plugin <= 7.5 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2025-53566MEDIUMWordPress WP Visitor Statistics (Real Time Traffic) plugin <= 7.8 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.2%