Veronalabs vulnerabilities

Products

• Wp Statistics 22
• Slimstat Analytics 20
• Wp Statistics 19
• Wp Sms 10
• Wp Sms 10
• Wp Statistics – Simple, Privacy-friendly Google Analytics Alternative 8
• Wp Sms – Messaging & Sms Notification For Wordpress, Woocommerce, Gravityforms, Etc 2
• Wsms (formerly Wp Sms) – Sms & Mms Notifications With Otp And 2fa For Woocommerce 2

Newest

• veronalabs wp statistics WordPress WP Statistics plugin <= 14.16.14 - Cross Site Scripting (XSS) vulnerability CVE-2026-97276 7.1 HighOctober 4, 2026
• veronalabs wp statistics – simple, privacy-friendly google analytics alternative WP Statistics <= 14.16.14 - Reflected Cross-Site Scripting via REQUEST_URI Query-Parameter Key CVE-2026-97652 6.1 MediumOctober 2, 2026
• veronalabs wp statistics WordPress WP Statistics plugin <= 14.16.13 - Cross Site Scripting (XSS) vulnerability CVE-2026-93770 7.1 HighSeptember 30, 2026
• veronalabs wp statistics WordPress WP Statistics plugin <= 14.16.11 - Cross Site Scripting (XSS) vulnerability CVE-2026-84774 6.1 MediumSeptember 3, 2026
• veronalabs wp statistics – simple, privacy-friendly google analytics alternative WP Statistics <= 14.16.8 - Unauthenticated Stored Cross-Site Scripting via 'utm_campaign' Parameter CVE-2026-15780 7.2 HighAugust 19, 2026
• unknown wp statistics WP Statistics < 14.16.10 - Subscriber+ Sensitive Data Disclosure via Metabox AJAX Handlers CVE-2026-16562 6.5 MediumAugust 8, 2026
• unknown slimstat analytics SlimStat Analytics < 5.5.0 - Unauthenticated Stored XSS via CF-IPCountry Header CVE-2026-12592 7.5 HighJuly 20, 2026
• veronalabs slimstat analytics WordPress Slimstat Analytics plugin <= 5.4.11 - SQL Injection vulnerability CVE-2026-54818 8.5 HighJune 17, 2026
• veronalabs slimstat analytics WordPress Slimstat Analytics plugin < 5.4.0 - Deserialization of untrusted data vulnerability CVE-2026-27410 6.5 MediumJune 17, 2026
• veronalabs wp sms WordPress WP SMS plugin <= 7.2.1 - Sensitive Data Exposure vulnerability CVE-2026-40790 6.5 MediumJune 15, 2026
• veronalabs wp statistics WordPress WP Statistics plugin <= 14.16.6 - Cross Site Scripting (XSS) vulnerability CVE-2026-48839 7.1 HighJune 1, 2026
• veronalabs slimstat analytics SlimStat Analytics <= 5.4.11 - Unauthenticated Stored Cross-Site Scripting via User-Agent Header CVE-2026-7634 7.2 HighMay 28, 2026
• veronalabs wp statistics – simple, privacy-friendly google analytics alternative WP Statistics <= 14.16.4 - Unauthenticated Stored Cross-Site Scripting via 'utm_source' Parameter CVE-2026-5231 7.2 HighApril 17, 2026
• veronalabs wp statistics – simple, privacy-friendly google analytics alternative WP Statistics <= 14.16.4 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure and Privacy Audit Manipulation CVE-2026-3488 6.5 MediumApril 17, 2026
• veronalabs slimstat analytics SlimStat Analytics <= 5.3.5 - Unauthenticated Stored Cross-Site Scripting via 'fh' CVE-2026-1238 7.2 HighMarch 19, 2026
• veronalabs wp sms WordPress WP SMS plugin <= 6.9.12 - SQL Injection vulnerability CVE-2026-28136 7.6 HighFebruary 26, 2026
• veronalabs slimstat analytics WordPress Slimstat Analytics plugin <= 5.3.2 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2025-69323 7.1 HighFebruary 20, 2026
• veronalabs wp sms WordPress WP SMS plugin <= 7.1 - Cross Site Scripting (XSS) vulnerability CVE-2026-25343 5.9 MediumFebruary 19, 2026
• veronalabs slimstat analytics SlimStat Analytics <= 5.3.1 - Authenticated (Subscriber+) SQL Injection via `args` Parameter CVE-2025-13431 6.5 MediumFebruary 11, 2026
• veronalabs slimstat analytics SlimStat Analytics <= 5.3.3 - Unauthenticated Stored Cross-Site Scripting via 'fh' Parameter CVE-2025-15057 7.2 HighJanuary 9, 2026
• veronalabs slimstat analytics SlimStat Analytics <= 5.3.4 - Unauthenticated Stored Cross-Site Scripting via 'notes/resource' Parameters CVE-2025-15055 7.2 HighJanuary 9, 2026
• veronalabs slimstat analytics SlimStat Analytics <= 5.3.2 - Unauthenticated Stored Cross-Site Scripting CVE-2025-14151 7.2 HighDecember 19, 2025
• veronalabs wp sms WordPress WP SMS plugin <= 7.0.1 - Broken Access Control vulnerability CVE-2025-62006 5.4 MediumOctober 22, 2025
• veronalabs wp statistics – simple, privacy-friendly google analytics alternative WP Statistics <= 14.5.4 - Unauthenticated Stored Cross-Site Scripting via User-Agent Header CVE-2025-9816 Public exploit EPSS 11.6% 7.2 HighSeptember 27, 2025
• veronalabs wp statistics WordPress WP Statistics Plugin <= 14.15 - Broken Access Control Vulnerability CVE-2025-55716 4.3 MediumAugust 14, 2025
• veronalabs wp statistics – simple, privacy-friendly google analytics alternative WP Statistics – The Most Popular Privacy-Friendly Analytics Plugin <= 14.13.3 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Settings Update CVE-2025-3953 5.4 MediumApril 30, 2025
• veronalabs slimstat analytics WordPress Slimstat Analytics plugin <= 5.0.5.1 - Broken Access Control vulnerability CVE-2023-33994 6.5 MediumDecember 13, 2024
• veronalabs slimstat analytics Slimstat Analytics <= 5.2.6 - Unauthenticated Stored Cross-Site Scripting CVE-2024-9548 7.2 HighOctober 14, 2024
• veronalabs wp sms WordPress WP SMS plugin <= 6.9.3 - Broken Access Control vulnerability CVE-2024-43331 5.3 MediumAugust 22, 2024
• veronalabs wp sms WordPress WP SMS plugin <= 6.5.1 - Cross Site Scripting (XSS) vulnerability CVE-2024-34811 5.9 MediumMay 13, 2024
• veronalabs wp sms WordPress WP SMS plugin <= 6.6.2 - Cross Site Request Forgery (CSRF) vulnerability CVE-2024-30454 4.3 MediumMarch 29, 2024
• veronalabs wp sms WordPress WP SMS plugin <= 6.3.4 - Cross Site Scripting (XSS) vulnerability CVE-2024-25920 6.5 MediumMarch 27, 2024
• veronalabs wp statistics – simple, privacy-friendly google analytics alternative WP Statistics <= 14.5 - Unauthenticated Stored Cross-Site Scripting CVE-2024-2194 EPSS 63.2% 7.2 HighMarch 13, 2024
• mostafas1990 wp sms – messaging & sms notification for wordpress, woocommerce, gravityforms, etc, veronalabs wp sms +1 more WordPress WP SMS Plugin <= 6.5.2 is vulnerable to Cross Site Scripting (XSS) CVE-2024-24881 7.1 HighFebruary 8, 2024
• veronalabs slimstat analytics SlimStat Analytics <= 5.1.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting CVE-2024-1073 6.4 MediumFebruary 2, 2024
• veronalabs wp sms, wsms (formerly wp sms) – sms & mms notifications with otp and 2fa for woocommerce +1 more WP SMS <= 6.5 - Authenticated (Admin+) SQL Injection to Reflected Cross-Site Scripting CVE-2023-6981 6.1 MediumJanuary 3, 2024
• veronalabs wp sms, wsms (formerly wp sms) – sms & mms notifications with otp and 2fa for woocommerce +1 more WP SMS <= 6.5 - Cross-Site Request Forgery to Subscriber Deletion CVE-2023-6980 4.3 MediumJanuary 3, 2024
• mostafas1990 wp sms – messaging & sms notification for wordpress, woocommerce, gravityforms, etc, veronalabs wp sms +1 more WordPress WP SMS Plugin <= 6.0.4 is vulnerable to Sensitive Data Exposure CVE-2023-27447 5.3 MediumDecember 28, 2023
• jason crouse, veronalabs slimstat analytics WordPress Slimstat Analytics Plugin <= 5.0.4 is vulnerable to SQL Injection CVE-2022-45373 8.8 HighNovember 6, 2023
• veronalabs slimstat analytics Slimstat Analytics <= 5.0.9 - Authenticated (Contributor+) Blind SQL Injection via Shortcode CVE-2023-4598 8.8 HighOctober 20, 2023
• jason crouse, veronalabs slimstat analytics WordPress Slimstat Analytics Plugin <= 5.0.8 is vulnerable to Cross Site Scripting (XSS) CVE-2023-40676 5.9 MediumSeptember 27, 2023
• veronalabs wp sms WordPress WP SMS Plugin <= 6.1.4 is vulnerable to Cross Site Scripting (XSS) CVE-2023-32742 7.1 HighAugust 30, 2023
• veronalabs slimstat analytics Slimstat Analytics <= 5.0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode CVE-2023-4597 6.4 MediumAugust 30, 2023
• jason crouse, veronalabs slimstat analytics WordPress Slimstat Analytics Plugin <= 5.0.4 is vulnerable to Cross Site Scripting (XSS) CVE-2022-45366 7.1 HighMay 25, 2023
• unknown wp statistics WP Statistics < 14.0 - Authenticated SQLi CVE-2023-0955 8.8 HighMarch 27, 2023
• unknown slimstat analytics Slimstat Analytics < 4.9.3.3 - Subscriber+ SQL Injection CVE-2023-0630 Public exploit 8.8 HighMarch 20, 2023
• veronalabs wp statistics WordPress WP Statistics Plugin <= 13.2.10 is vulnerable to SQL Injection CVE-2022-38074 9.9 CriticalMarch 13, 2023
• veronalabs wp statistics, wp statistics – simple, privacy-friendly google analytics alternative +1 more WP Statistics <= 13.1.1 - Cross-Site Request Forgery to Arbitrary Plugin Activation and Deactivation CVE-2021-4333 6.5 MediumMarch 7, 2023
• unknown wp statistics WP Statistics < 13.2.9 - Authenticated SQLi CVE-2022-4230 EPSS 35.7% 8.8 HighJanuary 23, 2023
• unknown slimstat analytics Slimstat Analytics < 4.9.3 - Unauthenticated Stored XSS CVE-2022-4310 6.1 MediumJanuary 9, 2023
• Show olderLoading…