VeronaLabs vulnerabilities

CVEs per yearBy the year they were published

1. 20211
2. 20222
3. 20236
4. 202411
5. 20255
6. 202619

Newest CVEs

• CVE-2026-97276

  WordPress WP Statistics plugin <= 14.16.14 - Cross Site Scripting (XSS) vulnerability

  VeronaLabs · WP Statistics

  High7.1
• CVE-2026-97652

  WP Statistics <= 14.16.14 - Reflected Cross-Site Scripting via REQUEST_URI Query-Parameter Key

  veronalabs · WP Statistics – Simple, privacy-friendly Google Analytics alternative

  Medium6.1
• CVE-2026-93770

  WordPress WP Statistics plugin <= 14.16.13 - Cross Site Scripting (XSS) vulnerability

  VeronaLabs · WP Statistics

  High7.1
• CVE-2026-84774

  WordPress WP Statistics plugin <= 14.16.11 - Cross Site Scripting (XSS) vulnerability

  VeronaLabs · WP Statistics

  Medium6.1
• CVE-2026-15780

  WP Statistics <= 14.16.8 - Unauthenticated Stored Cross-Site Scripting via 'utm_campaign' Parameter

  veronalabs · WP Statistics – Simple, privacy-friendly Google Analytics alternative

  High7.2
• CVE-2026-54818

  WordPress Slimstat Analytics plugin <= 5.4.11 - SQL Injection vulnerability

  VeronaLabs · Slimstat Analytics

  High8.5
• CVE-2026-27410

  WordPress Slimstat Analytics plugin < 5.4.0 - Deserialization of untrusted data vulnerability

  VeronaLabs · Slimstat Analytics

  Medium6.5
• CVE-2026-40790

  WordPress WP SMS plugin <= 7.2.1 - Sensitive Data Exposure vulnerability

  VeronaLabs · WP SMS

  Medium6.5
• CVE-2026-48839

  WordPress WP Statistics plugin <= 14.16.6 - Cross Site Scripting (XSS) vulnerability

  VeronaLabs · WP Statistics

  High7.1
• CVE-2026-7634

  SlimStat Analytics <= 5.4.11 - Unauthenticated Stored Cross-Site Scripting via User-Agent Header

  veronalabs · SlimStat Analytics

  High7.2