Skip to content

Product

firestats vulnerabilities

2 published CVES affecting firestats, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
2
Critical
0
High
2
Medium
0
Low
0
Unscored
0
CISA KEV
0

Latest firestats CVEs

Newest publication first

  1. CVE-2009-2144 FireStats <1.6.2 - SQL Injection

    Published
    HighCVSS 7.5 EPSS 2.0%

    SQL injection vulnerability in the FireStats plugin before 1.6.2-stable for WordPress allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

  2. CVE-2009-2143 FireStats < 1.6.2 - Remote File Inclusion

    Published
    HighCVSS 7.5 EPSS 2.8%

    PHP remote file inclusion vulnerability in firestats-wordpress.php in the FireStats plugin before 1.6.2-stable for WordPress allows remote attackers to execute arbitrary PHP code via a URL in the fs_javascript parameter.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.