Unrated
The wp-statistics plugin before 12.0.8 for WordPress has SQL injection.
CVE-2017-18515
First seen on SecPulse
References
- advisory wordpress.org