CVE-2026-66430

HighCVSS 8.5

Published: 13/08/2026(UTC)Updated: 14/08/2026(UTC)Translated: 13/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.34%

27th percentile - higher than 27% of all known CVEs

Subscriber SQL Injection vulnerability in Visitor Traffic Real Time Statistics Pro versions up to 11.10.

A user with subscriber role may inject malicious SQL queries, potentially leading to database compromise and data leakage.

Update the plugin to the latest version that includes a fix for the SQL Injection vulnerability.

Original NVD description (English source)

Subscriber SQL Injection in Visitor Traffic Real Time Statistics Pro <= 11.10 versions.