The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The WP-Stats WordPress plugin before 2.52 does not have CSRF check when saving its settings, and did not escape some of them when outputting them, allowing attacker to make logged in high privilege users change them and set Cross-Site Scripting payloads
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Wp Stats Plugin | — | Update wp-stats plugin to version 2.52, or a newer patched version | May 15, 2025 | Jun 17, 2015 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub