CVE-2021-24750 Scanner
CVE-2021-24750 scanner - SQL Injection (SQLi) vulnerability in Visitor Statistics (Real Time Traffic) plugin for WordPress
Used 3.5k times · 3.4k assets checked · domain, ipv4, subdomain
CVE
CVE-2021-24750
8.8
CVSS
Description
The WP Visitor Statistics (Real Time Traffic) WordPress plugin before 4.8 does not properly sanitise and escape the refUrl in the refDetails AJAX action, available to any authenticated user, which could allow users with a role as low as subscriber to perform SQL injection attacks
Attack Vector
-
Privileges Req.
-
User Interaction
-
wp visitor statistics (real time traffic)
Updated Oct 24, 2026View on NVD →
S4E scanner
CVE history: wp visitor statistics (real time traffic)
Predict next CVE date with AIMonitor this CVE on your assets
S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.
Create a free account →