WP Statistics WordPress Plugin Vulnerable to Unauthenticated Blind SQL Injection
by Satnam Narang on July 2, 2019
Popular WordPress Plugin with over half a million installations is potentially vulnerable to unauthenticated blind SQL injection attacks.
Background
On July 1, maintainers of WP Statistics, a popular WordPress plugin for gathering website statistics about visitor data that boasts over 500,000 active installations, released an update to address a serious vulnerability.