WP Statistics – The Most Popular Privacy-Friendly Analytics Plugin

Information

Software Type Plugin
Software Slug wp-statistics (view on wordpress.org)
Software Status Active
Software Author mostafas1990
Software Website wp-statistics.com
Software Downloads 27,987,687
Software Active Installs 600,000
Software Record Last Updated November 21, 2024

Showing 1-20 of 32 Vulnerabilities

8.8
CVE ID Unknown
Sep 8, 2022
Researchers:
4.3
CVE ID Unknown
Sep 7, 2022
Researchers:
6.1
CVE ID Unknown
Aug 30, 2021
Researcher: RE-ALTER
Title Status CVE ID CVSS Researchers Date
WP Statistics <= 14.5 - Unauthenticated Stored Cross-Site Scripting Patched CVE-2024-2194 7.2 Tim Coen March 11, 2024
WP Statistics <= 13.2.16 - Authenticated (Admin+) SQL Injection Patched CVE-2023-0955 7.2 Erwan LR March 6, 2023
WP Statistics <= 13.2.10 - Authenticated (Subscriber+) SQL Injection Patched CVE-2022-38074 8.8 Rafie Muhammad January 31, 2023
WP Statistics <= 13.2.8 - Authenticated (Admin+) SQL Injection Patched CVE-2022-4230 7.2 Jordy Versmissen December 27, 2022
WP Statistics <= 13.2.5 - Authenticated (Subscriber+) SQL Injection Patched 8.8 September 8, 2022
WP Statistics <= 13.2.5 - Information Disclosure Patched 4.3 September 7, 2022
WP Statistics <= 13.1.7 - Cross-Site Scripting Patched CVE-2022-27231 6.1 Shogo Kumamaru May 24, 2022
WP Statistics <= 13.2.1 - Reflected Cross-Site Scripting Patched CVE-2022-1005 6.1 Taurus Omar May 11, 2022
WP Statistics <= 13.1.5 - Unauthenticated Stored Cross-Site Scripting via platform Patched CVE-2022-25307 7.2 Muhammad Zeeshan (Xib3rR4dAr) February 17, 2022
WP Statistics <= 13.1.5 - Unauthenticated Blind SQL Injection via current_page_type Patched CVE-2022-0651 9.8 Muhammad Zeeshan (Xib3rR4dAr) February 16, 2022
WP Statistics <= 13.1.5 - Unauthenticated Stored Cross-Site Scripting via browser Patched CVE-2022-25306 7.2 Muhammad Zeeshan (Xib3rR4dAr) February 16, 2022
WP Statistics <= 13.1.5 - Unauthenticated Blind SQL Injection via IP Patched CVE-2022-25149 9.8 Muhammad Zeeshan (Xib3rR4dAr) February 16, 2022
WP Statistics <= 13.1.5 - Unauthenticated SQL Injection Patched CVE-2022-25148 9.8 Muhammad Zeeshan (Xib3rR4dAr) February 16, 2022
WP Statistics <= 13.1.5 - Unauthenticated Stored Cross-Site Scripting via IP Patched CVE-2022-25305 7.2 Muhammad Zeeshan (Xib3rR4dAr) February 16, 2022
WP Statistics <= 13.1.4 - Unauthenticated Blind SQL Injection Patched CVE-2022-0513 9.8 Cyku Hong February 10, 2022
WP Statistics <= 13.1.1 - Cross-Site Request Forgery to Arbitrary Plugin Activation and Deactivation Patched CVE-2021-4333 6.5 Ram September 11, 2021
WP Statistics <= 13.0.9 - Reflected Cross-Site Scripting Patched 6.1 RE-ALTER August 30, 2021
WP Statistics <= 13.0.7 - Unauthenticated SQL Injection Patched CVE-2021-24340 7.5 Ram May 19, 2021
WP Statistics <= 12.6.6.1 - Unauthenticated Stored Cross-Site Scripting via IP Manipulation Patched 7.2 Antony Garand July 1, 2019
WP Statistics <= 12.6.6.1 - Unauthenticated Blind SQL Injection Patched CVE-2019-13275 9.8 Thomas Chauchefoin July 1, 2019

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation