Veronalabs Slimstat Analytics vulnerabilities

• unknown slimstat analytics SlimStat Analytics < 5.5.0 - Unauthenticated Stored XSS via CF-IPCountry Header CVE-2026-12592 7.5 HighJuly 20, 2026
• veronalabs slimstat analytics WordPress Slimstat Analytics plugin <= 5.4.11 - SQL Injection vulnerability CVE-2026-54818 8.5 HighJune 17, 2026
• veronalabs slimstat analytics WordPress Slimstat Analytics plugin < 5.4.0 - Deserialization of untrusted data vulnerability CVE-2026-27410 6.5 MediumJune 17, 2026
• veronalabs slimstat analytics SlimStat Analytics <= 5.4.11 - Unauthenticated Stored Cross-Site Scripting via User-Agent Header CVE-2026-7634 7.2 HighMay 28, 2026
• veronalabs slimstat analytics SlimStat Analytics <= 5.3.5 - Unauthenticated Stored Cross-Site Scripting via 'fh' CVE-2026-1238 7.2 HighMarch 19, 2026
• veronalabs slimstat analytics WordPress Slimstat Analytics plugin <= 5.3.2 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2025-69323 7.1 HighFebruary 20, 2026
• veronalabs slimstat analytics SlimStat Analytics <= 5.3.1 - Authenticated (Subscriber+) SQL Injection via `args` Parameter CVE-2025-13431 6.5 MediumFebruary 11, 2026
• veronalabs slimstat analytics SlimStat Analytics <= 5.3.3 - Unauthenticated Stored Cross-Site Scripting via 'fh' Parameter CVE-2025-15057 7.2 HighJanuary 9, 2026
• veronalabs slimstat analytics SlimStat Analytics <= 5.3.4 - Unauthenticated Stored Cross-Site Scripting via 'notes/resource' Parameters CVE-2025-15055 7.2 HighJanuary 9, 2026
• veronalabs slimstat analytics SlimStat Analytics <= 5.3.2 - Unauthenticated Stored Cross-Site Scripting CVE-2025-14151 7.2 HighDecember 19, 2025
• veronalabs slimstat analytics WordPress Slimstat Analytics plugin <= 5.0.5.1 - Broken Access Control vulnerability CVE-2023-33994 6.5 MediumDecember 13, 2024
• veronalabs slimstat analytics Slimstat Analytics <= 5.2.6 - Unauthenticated Stored Cross-Site Scripting CVE-2024-9548 7.2 HighOctober 14, 2024
• veronalabs slimstat analytics SlimStat Analytics <= 5.1.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting CVE-2024-1073 6.4 MediumFebruary 2, 2024
• jason crouse, veronalabs slimstat analytics WordPress Slimstat Analytics Plugin <= 5.0.4 is vulnerable to SQL Injection CVE-2022-45373 8.8 HighNovember 6, 2023
• veronalabs slimstat analytics Slimstat Analytics <= 5.0.9 - Authenticated (Contributor+) Blind SQL Injection via Shortcode CVE-2023-4598 8.8 HighOctober 20, 2023
• jason crouse, veronalabs slimstat analytics WordPress Slimstat Analytics Plugin <= 5.0.8 is vulnerable to Cross Site Scripting (XSS) CVE-2023-40676 5.9 MediumSeptember 27, 2023
• veronalabs slimstat analytics Slimstat Analytics <= 5.0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode CVE-2023-4597 6.4 MediumAugust 30, 2023
• jason crouse, veronalabs slimstat analytics WordPress Slimstat Analytics Plugin <= 5.0.4 is vulnerable to Cross Site Scripting (XSS) CVE-2022-45366 7.1 HighMay 25, 2023
• unknown slimstat analytics Slimstat Analytics < 4.9.3.3 - Subscriber+ SQL Injection CVE-2023-0630 Public exploit 8.8 HighMarch 20, 2023
• unknown slimstat analytics Slimstat Analytics < 4.9.3 - Unauthenticated Stored XSS CVE-2022-4310 6.1 MediumJanuary 9, 2023