title: WP Visitor Statistics (Real Time Traffic) < 5.6 - Subscriber+ SQL Injection
description: The WP Visitor Statistics (Real Time Traffic) WordPress plugin before 5.6 does not sanitise and escape the id parameter before using it in a SQL statement via the refUrlDetails AJAX action, available to any authenticated user, leading to a SQL injection
problem types: CWE-89 SQL Injection
affected:
{
product: WP Visitor Statistics (Real Time Traffic)
vendor: Unknown
versions:
lessThan: 5.6, status: affected, version: 5.6, versionType: custom
}