All vulnerabilities
40 / 40
Sort
7.5
CVE-2022-25148CVE
The WP Statistics WordPress plugin is vulnerable to SQL Injection due to insufficient escaping …
2022-01-01Pre-auth
EPSS81.4%
pct 99
6.1
CVE-2022-25305CVE
The WP Statistics WordPress plugin is vulnerable to Cross-Site Scripting due to insufficient es…
2022-01-01Pre-auth
EPSS81.2%
pct 99
7.5
CVE-2022-25149CVE
The WP Statistics WordPress plugin is vulnerable to SQL Injection due to insufficient escaping …
2022-01-01Pre-auth
EPSS78.0%
pct 99
7.2
CVE-2024-2194ANC
The WP Statistics plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the URL…
2024-01-01Pre-auth
EPSS67.7%
pct 99
7.5
CVE-2022-0513CVE
The WP Statistics WordPress plugin is vulnerable to SQL Injection due to insufficient escaping …
2022-01-01Pre-auth
EPSS53.5%
pct 98
8.8
CVE-2022-4230CVE
The WP Statistics WordPress plugin before 13.2.9 does not escape a parameter, which could allow…
2022-01-01
EPSS34.3%
pct 98
7.5
CVE-2022-0651CVE
The WP Statistics WordPress plugin is vulnerable to SQL Injection due to insufficient escaping …
2022-01-01Pre-auth
EPSS33.0%
pct 98
7.5
CVE-2021-24340CVE
The WP Statistics WordPress plugin before 13.0.8 relied on using the WordPress esc_sql() functi…
2021-01-01Pre-auth
EPSS26.9%
pct 97
7.2
CVE-2025-9816ANC
The WP Statistics – The Most Popular Privacy-Friendly Analytics Plugin plugin for WordPress is …
2025-01-01Pre-auth
EPSS9.1%
pct 94
9.8
CVE-2019-13275CVE
An issue was discovered in the VeronaLabs wp-statistics plugin before 12.6.7 for WordPress. The…
2019-01-01Pre-auth
EPSS2.6%
pct 83
9.8
CVE-2017-18515CVE
The wp-statistics plugin before 12.0.8 for WordPress has SQL injection.
2017-01-01Pre-auth
EPSS2.5%
pct 82
6.1
CVE-2019-10864CVE
The WP Statistics plugin through 12.6.2 for WordPress has XSS, allowing a remote attacker to in…
2019-01-01Pre-auth
EPSS1.4%
pct 68
6.1
CVE-2022-25307CVE
The WP Statistics WordPress plugin is vulnerable to Cross-Site Scripting due to insufficient es…
2022-01-01Pre-auth
EPSS1.4%
pct 68
6.1
CVE-2022-25306CVE
The WP Statistics WordPress plugin is vulnerable to Cross-Site Scripting due to insufficient es…
2022-01-01Pre-auth
EPSS1.4%
pct 68
5.4
CVE-2019-12566CVE
The WP Statistics plugin through 12.6.5 for Wordpress has stored XSS in includes/class-wp-stati…
2019-01-01
EPSS1.1%
pct 61
6.1
CVE-2022-27231CVE
Cross-site scripting vulnerability exists in WP Statistics versions prior to 13.2.0 because it …
2022-01-01Pre-auth
EPSS1.0%
pct 57
8.8
CVE-2023-0955CVE
The WP Statistics WordPress plugin before 14.0 does not escape a parameter, which could allow a…
2023-01-01
EPSS0.9%
pct 54
6.1
CVE-2022-1005CVE
The WP Statistics WordPress plugin before 13.2.2 does not sanitise the REQUEST_URI parameter be…
2022-01-01Pre-auth
EPSS0.9%
pct 53
8.8
CVE-2022-38074CVE
SQL Injection vulnerability in VeronaLabs WP Statistics plugin <= 13.2.10 versions.
2022-01-01
EPSS0.7%
pct 49
6.1
CVE-2018-1000556CVE
WordPress version 4.8 + contains a Cross Site Scripting (XSS) vulnerability in plugins.php or c…
2018-01-01Pre-auth
EPSS0.7%
pct 48
5.4
CVE-2021-24561CVE
The WP SMS WordPress plugin before 5.4.13 does not sanitise the "wp_group_name" parameter befor…
2021-01-01
EPSS0.7%
pct 47
7.5
CVE-2023-27447CVE
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in VeronaLabs WP SMS –…
2023-01-01Pre-auth
EPSS0.5%
pct 40
7.2
CVE-2026-5231ANC
The WP Statistics plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'ut…
2026-01-01Pre-auth
EPSS0.5%
pct 37
4.8
CVE-2024-34811CVE
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerabil…
2024-01-01
EPSS0.4%
pct 33
4.9
CVE-2023-6981CVE
The WP SMS – Messaging & SMS Notification for WordPress, WooCommerce, GravityForms, etc plugin …
2023-01-01
EPSS0.4%
pct 32
6.1
CVE-2023-32742CVE
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in VeronaLabs WP SMS plugin <= 6.1.4…
2023-01-01Pre-auth
EPSS0.4%
pct 31
6.1
CVE-2024-24881CVE
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerabil…
2024-01-01Pre-auth
EPSS0.4%
pct 29
6.5
CVE-2021-4333CVE
The WP Statistics plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions …
2021-01-01Pre-auth
EPSS0.4%
pct 29
9.8
CVE-2024-43331CVE
Missing Authorization vulnerability in VeronaLabs WP SMS.This issue affects WP SMS: from n/a th…
2024-01-01Pre-auth
EPSS0.4%
pct 28
6.5
CVE-2026-40790ANC
Subscriber Sensitive Data Exposure in WP SMS <= 7.2.1 versions.
2026-01-01
EPSS0.3%
pct 24
5.4
CVE-2024-25920CVE
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerabil…
2024-01-01
EPSS0.3%
pct 23
6.5
CVE-2026-3488ANC
The WP Statistics plugin for WordPress is vulnerable to Missing Authorization in all versions u…
2026-01-01Pre-auth
EPSS0.3%
pct 22
7.6
CVE-2026-28136ANC
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerabil…
2026-01-01
EPSS0.3%
pct 20
5.4
CVE-2025-62006ANC
Missing Authorization vulnerability in VeronaLabs WP SMS wp-sms.This issue affects WP SMS: from…
2025-01-01
EPSS0.3%
pct 16
4.3
CVE-2023-6980CVE
The WP SMS – Messaging & SMS Notification for WordPress, WooCommerce, GravityForms, etc plugin …
2023-01-01Pre-auth
EPSS0.2%
pct 15
8.8
CVE-2024-30454CVE
Cross-Site Request Forgery (CSRF) vulnerability in VeronaLabs WP SMS.This issue affects WP SMS:…
2024-01-01Pre-auth
EPSS0.2%
pct 14
5.4
CVE-2025-3953ANC
The WP Statistics – The Most Popular Privacy-Friendly Analytics Plugin plugin for WordPress is …
2025-01-01
EPSS0.2%
pct 13
7.1
CVE-2026-48839ANC
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerabil…
2026-01-01Pre-auth
EPSS0.2%
pct 11
4.3
CVE-2025-55716ANC
Missing Authorization vulnerability in VeronaLabs WP Statistics wp-statistics allows Exploiting…
2025-01-01
EPSS0.2%
pct 7
5.9
CVE-2026-25343ANC
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerabil…
2026-01-01
EPSS0.2%
pct 6
Select a vulnerability on the left to open the preview.