VeronaLabs Slimstat Analytics vulnerabilities

CVEs per yearBy the year they were published

1. 20232
2. 20243
3. 20251
4. 20268

Newest CVEs

• CVE-2026-54818

  WordPress Slimstat Analytics plugin <= 5.4.11 - SQL Injection vulnerability

  VeronaLabs · Slimstat Analytics

  High8.5
• CVE-2026-27410

  WordPress Slimstat Analytics plugin < 5.4.0 - Deserialization of untrusted data vulnerability

  VeronaLabs · Slimstat Analytics

  Medium6.5
• CVE-2026-7634

  SlimStat Analytics <= 5.4.11 - Unauthenticated Stored Cross-Site Scripting via User-Agent Header

  veronalabs · SlimStat Analytics

  High7.2
• CVE-2026-1238

  SlimStat Analytics <= 5.3.5 - Unauthenticated Stored Cross-Site Scripting via 'fh'

  veronalabs · SlimStat Analytics

  High7.2
• CVE-2025-69323

  WordPress Slimstat Analytics plugin <= 5.3.2 - Reflected Cross Site Scripting (XSS) vulnerability

  VeronaLabs · Slimstat Analytics

  High7.1
• CVE-2025-13431

  SlimStat Analytics <= 5.3.1 - Authenticated (Subscriber+) SQL Injection via `args` Parameter

  veronalabs · SlimStat Analytics

  Medium6.5
• CVE-2025-15055

  SlimStat Analytics <= 5.3.4 - Unauthenticated Stored Cross-Site Scripting via 'notes/resource' Parameters

  veronalabs · SlimStat Analytics

  High7.2
• CVE-2025-15057

  SlimStat Analytics <= 5.3.3 - Unauthenticated Stored Cross-Site Scripting via 'fh' Parameter

  veronalabs · SlimStat Analytics

  High7.2
• CVE-2025-14151

  SlimStat Analytics <= 5.3.2 - Unauthenticated Stored Cross-Site Scripting

  veronalabs · SlimStat Analytics

  High7.2
• CVE-2023-33994

  WordPress Slimstat Analytics plugin <= 5.0.5.1 - Broken Access Control vulnerability

  VeronaLabs · Slimstat Analytics

  Medium6.5