Plugin Name : zdstats
Effected Version : 2.0.1 (and most probably lower version's if any)
Minimum Level of Access Required : Unauthenticated
PoC - (Proof of Concept) :
Vulnerable Parameter : ‘lang’
Vendor Contacted : 2014-01-17
ZdStatistics is a wordpress plugin allowing you to trace your visitors. This is not a simple statistics plugin, it is very flexible and dynamic. This means you can update your filters by yourself and therefore by as realistic as possible. Here is a lsit of functions : * Display a summary of visits (week, month, trimester, semester and year) * Display Pageviews and visitors with daily precision * Referring pages * Used keywords * Localization of your visitors * Browser / OS * Outgoing links The statistics are collected and instantly processed, or not, as you can decide this using an option. You can also separate feeds from real pageviews, exclude some IPs from being collected (@home, @work, @school, etc...) and choose to collect robots pageviews or not.