Critical severity9.8NVD Advisory· Published May 15, 2023· Updated Jun 17, 2026

CVE-2023-0600

Description

The WP Visitor Statistics (Real Time Traffic) WordPress plugin before 6.9 does not escape user input which is concatenated to an SQL query, allowing unauthenticated visitors to conduct SQL Injection attacks.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

WordPress/Visitors Traffic Real Time Statisticscpe-rescue
Package: https://wordpress.org/plugins/visitors-traffic-real-time-statistics
WordPress/WP Visitor Statisticsllm-create
Range: <6.9

Patches

Vulnerability mechanics

References

wpscan.com/vulnerability/8f46df4d-cb80-4d66-846f-85faf2ea0ec4nvdExploit

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.003
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000