Wassup Real Time Analytics Project

wassup_real_time_analytics_project

2 CVEs • 1 product

Products (1)

Click to collapse

Toggle

Wassup Real Time Analytics

wassup_real_time_analytics

2 CVEs

CVEs (2)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2023-5653 1Wassup Real Time Analytics Project 1Wassup Real Time Analytics Jun 17, 2026 Nov 27, 2023 N/A· v4 6.1 MEDIUM· v3 N/A· v2 The WassUp Real Time Analytics WordPress plugin through 1.9.4.5 does not escape IP address provided via some headers before outputting them back in an admin page, allowing unauthenticated users to perform Stored XSS atta...Show more The WassUp Real Time Analytics WordPress plugin through 1.9.4.5 does not escape IP address provided via some headers before outputting them back in an admin page, allowing unauthenticated users to perform Stored XSS attacks against logged in adminsShow less
CVE-2016-10919 1Wassup Real Time Analytics Project 1Wassup Real Time Analytics Nov 21, 2024 Aug 22, 2019 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 The wassup plugin before 1.9.1 for WordPress has XSS via the Top stats widget or the wassupURI::add_siteurl method, a different vulnerability than CVE-2012-2633.

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2023-5653

1Wassup Real Time Analytics Project

1Wassup Real Time Analytics

Jun 17, 2026

Nov 27, 2023

N/A· v4

6.1 MEDIUM· v3

N/A· v2

The WassUp Real Time Analytics WordPress plugin through 1.9.4.5 does not escape IP address provided via some headers before outputting them back in an admin page, allowing unauthenticated users to perform Stored XSS atta...Show more

CVE-2016-10919

1Wassup Real Time Analytics Project

1Wassup Real Time Analytics

Nov 21, 2024

Aug 22, 2019

N/A· v4

6.1 MEDIUM· v3

4.3 MEDIUM· v2

The wassup plugin before 1.9.1 for WordPress has XSS via the Top stats widget or the wassupURI::add_siteurl method, a different vulnerability than CVE-2012-2633.