1 results (0.001 seconds)
CVSS: 4.3EPSS: %CPEs: 1EXPL: 0
CVE-2023-47557 – Visitors Traffic Real Time Statistics <= 7.2 - Missing Authorization via multiple AJAX actions
https://notcve.org/view.php?id=CVE-2023-47557
The Visitors Traffic Real Time Statistics plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on multiple AJAX functions in versions up to, and including, 7.2. This makes it possible for authenticated attackers, with subscriber-level access and above, to view visitor statistics. • CWE-862: Missing Authorization •