PT-2026-133288

CVE-2026-117572

Published

2026-10-28

Updated

2026-10-30

Description by

CVSS 3.1

4.1

Medium

MetricsAV:N/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions WP Visitor Statistics (Real Time Traffic) versions prior to 8.8

Description High-privilege users, such as administrators, can perform SQL injection attacks due to insufficient sanitization and escaping of a user-supplied parameter before its use in a SQL statement. This flaw allows authenticated attackers to append additional SQL queries to existing ones to extract sensitive information from the database.

Recommendations Update to version 8.8 or later.

Exploitability

Exploit

Fix

Impacts

Researchers

Claudio Marchesini

Dottor Marc

Enrico Marcolini

Vendors

Affected products

Weakness enumeration