CVE-2026-96267 | osamaesh WP Visitor Statistics Plugin up to 8.7 on WordPress Traffic Sources Dashboard fullRef sql injection

October 3, 2026 Yanac

A vulnerability classified as critical has been found in osamaesh WP Visitor Statistics Plugin up to 8.7 on WordPress. The impacted element is an unknown function of the component Traffic Sources Dashboard. The manipulation of the argument fullRef leads to sql injection.

This vulnerability is documented as CVE-2026-96267. The attack can be initiated remotely. There is not any exploit available.VulDB Recent EntriesRead More