plugin
7 known security issues reported for the Firestats WordPress plugin. Most recent disclosed Jul 9, 2010.
Running Firestats on your site? Check whether your installed version is affected.
Scan your site freeThis Firestats plugin is prone to remote file-include vulnerability. It fails to clean user data sufficiently. The attacker may compromise the application and the other attacks are possible.
FireStats plugin is prone to multiple cross-site scripting vulnerabilities and an authentication BYPASS vulnerabilities. An attacker may gain unauthorized access to the affected application and execute arbitrary script code in the context of the affected site. In that way the attacker can steal cookie-based authentica...
SQL injection vulnerability in the FireStats plugin before 1.6.2-stable for WordPress allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
[en] PHP remote file inclusion vulnerability in firestats-wordpress.php in the FireStats plugin before 1.6.2-stable for WordPress allows remote attackers to execute arbitrary PHP code via a URL in the fs_javascript parameter.
[en] SQL injection vulnerability in the FireStats plugin before 1.6.2-stable for WordPress allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
PHP remote file inclusion vulnerability in firestats-wordpress.php in the FireStats plugin before 1.6.2-stable for WordPress allows remote attackers to execute arbitrary PHP code via a URL in the fs_javascript parameter.
The firestats WordPress plugin was affected by a Remote Configuration File Download security vulnerability.
Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.
Scan your site free