What’s Vulnerable › Vulnerabilities

CVE-2017-20099: Analytics Stats Counter Statistics Plugin code injection

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.2% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2022-06-27 · updated 2026-06-17
• Weakness: CWE-94

Description

A vulnerability was found in Analytics Stats Counter Statistics Plugin 1.2.2.5 and classified as critical. This issue affects some unknown processing. The manipulation leads to code injection. The attack may be initiated remotely.

Affected products

• Analytics Stats Counter Statistics Plugin: 1.2.2.5

References

• http://seclists.org/fulldisclosure/2017/Feb/74
• https://vuldb.com/?id.97367
• http://seclists.org/fulldisclosure/2017/Feb/74
• https://vuldb.com/?id.97367

Get alerted when CVE-2017-20099 or the next vulnerability affects your stack