Ice00 Newstatpress vulnerabilities

• ice00 newstatpress NewStatPress <= 1.4.5 - Unauthenticated Stored Cross-Site Scripting via 'urlrequested' Attribute via Query String CVE-2026-101924 7.2 HighOctober 14, 2026
• ice00 newstatpress NewStatPress <= 1.4.5 - Unauthenticated Stored Cross-Site Scripting via URL Request Tracking (urlrequested field) CVE-2026-100153 7.2 HighOctober 14, 2026
• ice00 newstatpress NewStatPress < 1.4.5 - Unauthenticated Stored XSS via Top Post Widget CVE-2026-14845 6.1 MediumJuly 31, 2026
• ice00 newstatpress NewStatPress <= 1.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2025-13747 6.4 MediumDecember 12, 2025
• ice00 newstatpress NewStatPress < 1.3.6 - Reflected Cross-Site Scripting CVE-2022-0206 6.1 MediumFebruary 14, 2022