Codepress Vulnerabilities

This vulnerability allows an attacker to access sensitive information from the WP Visitor Statistics plugin, potentially exposing user data and site activity. It affects versions up to 6.9.4, so sites using this plugin without updates are at risk.

This vulnerability allows an attacker with an authenticated user account to manipulate the database by injecting malicious SQL code through a poorly handled parameter in the WP Visitor Statistics plugin. If exploited, this could lead to unauthorized access to sensitive data or even complete control over the database.

This vulnerability allows an attacker, even with a low-level user role like a subscriber, to execute SQL injection attacks, which means they could manipulate the database to access or alter sensitive information. The issue arises from the plugin not properly cleaning up user input in a specific function, making it accessible to any authenticated user.