CVE-2026-32479

CriticalCVSS 9.3

Published: 27/08/2026(UTC)Translated: 27/08/2026(UTC)NVD NIST

Summary

The Visitor Traffic Real Time Statistics Pro plugin versions up to 11.17 contain an unauthenticated SQL Injection vulnerability. An attacker can manipulate database queries, potentially leading to unauthorized data access.

Risk Assessment

Risk of sensitive data leakage from the database, such as user data, and potential modification or deletion of data.

Recommendation

Update the Visitor Traffic Real Time Statistics Pro plugin to the latest version that includes a fix for this vulnerability.

Original NVD description (English source)

Unauthenticated SQL Injection in Visitor Traffic Real Time Statistics Pro <= 11.17 versions.