CVE-2026-66430

Name of the Vulnerable Software and Affected Versions Visitor Traffic Real Time Statistics Pro versions prior to 11.11

Description An issue exists in the Visitor Traffic Real Time Statistics Pro plugin for WordPress where insufficient escaping of user-supplied parameters and lack of proper preparation of SQL queries allow authenticated attackers with subscriber-level access or higher to perform SQL Injection. This allows the addition of malicious SQL queries to existing ones to extract sensitive information from the database.

Recommendations Update to a version newer than 11.10.