CVE-2024-28394: Advancedplugins Reportsstatistics

Critical severity, CVSS 9.8. EPSS: 1.2% chance of exploitation in the next 30 days.

An issue in Advanced Plugins reportsstatistics v1.3.20 and before allows a remote attacker to execute arbitrary code via the Sales Reports, Statistics, Custom Fields & Export module.

Affected products

• Advancedplugins Reportsstatistics: up to and including 1.3.20

Published 2024-03-19. Last modified 2026-06-17.