Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

WP Statistics vulnerabilities

9 published CVEs name WP Statistics among the affected products.

Published CVEs
9
Last 12 months
0
Critical
3
Known exploited
0

Critical 3High 3Medium 3Low 0Not scored 0

CVEs per yearBy the year they were published

  1. 20173
  2. 20226

Newest CVEs

  • CVE-2022-25307

    WP Statistics <= 13.1.5 Unauthenticated Stored Cross-Site Scripting via platform

    WP Statistics · WP Statistics

    High7.2
  • CVE-2022-25305

    WP Statistics <= 13.1.5 Unauthenticated Stored Cross-Site Scripting via IP

    WP Statistics · WP Statistics

    High7.2
  • CVE-2022-25306

    WP Statistics <= 13.1.5 Unauthenticated Stored Cross-Site Scripting via browser

    WP Statistics · WP Statistics

    High7.2
  • CVE-2022-25149

    WP Statistics <= 13.1.5 Unauthenticated Blind SQL Injection via IP

    WP Statistics · WP Statistics

    Critical9.8
  • CVE-2022-0651

    WP Statistics <= 13.1.5 Unauthenticated Blind SQL Injection via current_page_type

    WP Statistics · WP Statistics

    Critical9.8
  • CVE-2022-25148

    WP Statistics <= 13.1.5 Unauthenticated Blind SQL Injection via current_page_id

    WP Statistics · WP Statistics

    Critical9.8
  • CVE-2017-2147

    Cross-site scripting vulnerability in WP Statistics version 12.0.4 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified…

    WP Statistics · WP Statistics

    Medium6.1
  • CVE-2017-2136

    Cross-site scripting vulnerability in WP Statistics version 12.0.4 and earlier allows remote attackers to inject arbitrary web script or HTML via specially…

    WP Statistics · WP Statistics

    Medium6.1
  • CVE-2017-2135

    Cross-site scripting vulnerability in WP Statistics version 12.0.1 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified…

    WP Statistics · WP Statistics

    Medium6.1

Products with the most CVEs

  1. WP Statistics9

Most common weaknesses

  1. CWE-79 Cross-site scripting (XSS)6
  2. CWE-89 SQL injection3