What is GHSA-frvm-vvmc-8h2w?

GHSA-frvm-vvmc-8h2w is a security advisory published by GitHub Security Advisories with High severity. The WP Visitor Statistics (Real Time Traffic) WordPress plugin before 8.8 does not sanitize and...

Which CVE IDs does GHSA-frvm-vvmc-8h2w cover?

GHSA-frvm-vvmc-8h2w covers the following CVE IDs: CVE-2026-117571. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-frvm-vvmc-8h2w?

GHSA-frvm-vvmc-8h2w has a CVSS v3 base score of 8.8, published by GitHub Security Advisories.

GHSA-frvm-vvmc-8h2wHighCVSS 8.8

The WP Visitor Statistics (Real Time Traffic) WordPress plugin before 8.8 does not sanitize and...

Vendor

GitHub Security Advisories

Published

October 30, 2026

Last Modified

October 30, 2026

🔗 CVE IDs covered (1)

CVE-2026-117571 →

📋 Description

The WP Visitor Statistics (Real Time Traffic) WordPress plugin before 8.8 does not sanitize and escape tracking data derived from public visitor requests before storing it and outputting it in the administrative statistics dashboard, allowing unauthenticated attackers to inject arbitrary web scripts that execute when a logged-in administrator views the statistics pages.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-117571
https://wpscan.com/vulnerability/088d6177-738f-4599-bd46-b4c725fb1cff
https://github.com/advisories/GHSA-frvm-vvmc-8h2w