Veronalabs Wp Statistics vulnerabilities

• veronalabs wp statistics WordPress WP Statistics plugin <= 14.16.14 - Cross Site Scripting (XSS) vulnerability CVE-2026-97276 7.1 HighOctober 4, 2026
• veronalabs wp statistics – simple, privacy-friendly google analytics alternative WP Statistics <= 14.16.14 - Reflected Cross-Site Scripting via REQUEST_URI Query-Parameter Key CVE-2026-97652 6.1 MediumOctober 2, 2026
• veronalabs wp statistics WordPress WP Statistics plugin <= 14.16.13 - Cross Site Scripting (XSS) vulnerability CVE-2026-93770 7.1 HighSeptember 30, 2026
• veronalabs wp statistics WordPress WP Statistics plugin <= 14.16.11 - Cross Site Scripting (XSS) vulnerability CVE-2026-84774 6.1 MediumSeptember 3, 2026
• veronalabs wp statistics – simple, privacy-friendly google analytics alternative WP Statistics <= 14.16.8 - Unauthenticated Stored Cross-Site Scripting via 'utm_campaign' Parameter CVE-2026-15780 7.2 HighAugust 19, 2026
• unknown wp statistics WP Statistics < 14.16.10 - Subscriber+ Sensitive Data Disclosure via Metabox AJAX Handlers CVE-2026-16562 6.5 MediumAugust 8, 2026
• veronalabs wp statistics WordPress WP Statistics plugin <= 14.16.6 - Cross Site Scripting (XSS) vulnerability CVE-2026-48839 7.1 HighJune 1, 2026
• veronalabs wp statistics – simple, privacy-friendly google analytics alternative WP Statistics <= 14.16.4 - Unauthenticated Stored Cross-Site Scripting via 'utm_source' Parameter CVE-2026-5231 7.2 HighApril 17, 2026
• veronalabs wp statistics – simple, privacy-friendly google analytics alternative WP Statistics <= 14.16.4 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure and Privacy Audit Manipulation CVE-2026-3488 6.5 MediumApril 17, 2026
• veronalabs wp statistics – simple, privacy-friendly google analytics alternative WP Statistics <= 14.5.4 - Unauthenticated Stored Cross-Site Scripting via User-Agent Header CVE-2025-9816 Public exploit EPSS 12.1% 7.2 HighSeptember 27, 2025
• veronalabs wp statistics WordPress WP Statistics Plugin <= 14.15 - Broken Access Control Vulnerability CVE-2025-55716 4.3 MediumAugust 14, 2025
• veronalabs wp statistics – simple, privacy-friendly google analytics alternative WP Statistics – The Most Popular Privacy-Friendly Analytics Plugin <= 14.13.3 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Settings Update CVE-2025-3953 5.4 MediumApril 30, 2025
• veronalabs wp statistics – simple, privacy-friendly google analytics alternative WP Statistics <= 14.5 - Unauthenticated Stored Cross-Site Scripting CVE-2024-2194 EPSS 63.2% 7.2 HighMarch 13, 2024
• unknown wp statistics WP Statistics < 14.0 - Authenticated SQLi CVE-2023-0955 8.8 HighMarch 27, 2023
• veronalabs wp statistics WordPress WP Statistics Plugin <= 13.2.10 is vulnerable to SQL Injection CVE-2022-38074 9.9 CriticalMarch 13, 2023
• veronalabs wp statistics, wp statistics – simple, privacy-friendly google analytics alternative +1 more WP Statistics <= 13.1.1 - Cross-Site Request Forgery to Arbitrary Plugin Activation and Deactivation CVE-2021-4333 6.5 MediumMarch 7, 2023
• unknown wp statistics WP Statistics < 13.2.9 - Authenticated SQLi CVE-2022-4230 EPSS 35.7% 8.8 HighJanuary 23, 2023
• veronalabs wp statistics Cross-site scripting vulnerability exists in WP Statistics versions prior to 13.2.0 because it... CVE-2022-27231 6.1 MediumJune 13, 2022
• unknown wp statistics WP Statistics < 13.2.2 - Reflected Cross-Site Scripting CVE-2022-1005 6.1 MediumJune 6, 2022
• veronalabs wp statistics, wp statistics statistics +1 more WP Statistics <= 13.1.5 Unauthenticated Stored Cross-Site Scripting via platform CVE-2022-25307 7.2 HighFebruary 24, 2022
• veronalabs wp statistics, wp statistics statistics +1 more WP Statistics <= 13.1.5 Unauthenticated Stored Cross-Site Scripting via IP CVE-2022-25305 EPSS 78.9% 7.2 HighFebruary 24, 2022
• veronalabs wp statistics, wp statistics statistics +1 more WP Statistics <= 13.1.5 Unauthenticated Stored Cross-Site Scripting via browser CVE-2022-25306 7.2 HighFebruary 24, 2022
• veronalabs wp statistics, wp statistics statistics +1 more WP Statistics <= 13.1.5 Unauthenticated Blind SQL Injection via IP CVE-2022-25149 EPSS 77.5% 9.8 CriticalFebruary 24, 2022
• veronalabs wp statistics, wp statistics statistics +1 more WP Statistics <= 13.1.5 Unauthenticated Blind SQL Injection via current_page_type CVE-2022-0651 EPSS 32.2% 9.8 CriticalFebruary 24, 2022
• veronalabs wp statistics, wp statistics statistics +1 more WP Statistics <= 13.1.5 Unauthenticated Blind SQL Injection via current_page_id CVE-2022-25148 Public exploit EPSS 80.9% 9.8 CriticalFebruary 24, 2022
• veronalabs wp statistics WP Statistics <= 13.1.4 Unauthenticated Blind SQL Injection via exclusion_reason CVE-2022-0513 EPSS 53.5% 9.8 CriticalFebruary 16, 2022
• veronalabs wp statistics WP Statistics < 13.0.8 - Unauthenticated SQL Injection CVE-2021-24340 EPSS 29.8% 7.5 HighJune 7, 2021
• veronalabs wp statistics, wp statistics statistics +1 more Cross-site scripting vulnerability in WP Statistics version 12.0.4 and earlier allows remote... CVE-2017-2147 6.1 MediumApril 28, 2017
• veronalabs wp statistics, wp statistics statistics +1 more Cross-site scripting vulnerability in WP Statistics version 12.0.4 and earlier allows remote... CVE-2017-2136 6.1 MediumApril 28, 2017
• veronalabs wp statistics, wp statistics statistics +1 more Cross-site scripting vulnerability in WP Statistics version 12.0.1 and earlier allows remote... CVE-2017-2135 6.1 MediumApril 28, 2017