Security
فارسی
All products

wp-slimstat

WordPress · Plugin
28 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
SlimStat Analytics <= 5.4.0 - Unauthenticated Stored Cross-Site ScriptingCVE-2026-12592 wp-slimstat WordPress High Fix reported
SlimStat Analytics <= 5.4.11 - Authenticated (Subscriber+) SQL InjectionCVE-2026-54818 wp-slimstat WordPress Medium Fix reported
SlimStat Analytics < 5.4.0 - Unauthenticated PHP Object InjectionCVE-2026-27410 wp-slimstat WordPress High Fix reported
SlimStat Analytics <= 5.4.11 - Unauthenticated Stored Cross-Site Scripting via User-Agent HeaderCVE-2026-7634 wp-slimstat WordPress High Fix reported
SlimStat Analytics <= 5.3.5 - Unauthenticated Stored Cross-Site Scripting via 'fh'CVE-2026-1238 wp-slimstat WordPress High Fix reported
SlimStat Analytics <= 5.3.1 - Authenticated (Subscriber+) SQL Injection via `args` ParameterCVE-2025-13431 wp-slimstat WordPress Medium Fix reported
Slimstat Analytics <= 5.3.2 - Reflected Cross-Site ScriptingCVE-2025-69323 wp-slimstat WordPress Medium Fix reported
SlimStat Analytics <= 5.3.4 - Unauthenticated Stored Cross-Site Scripting via 'notes/resource' ParametersCVE-2025-15055 wp-slimstat WordPress High Fix reported
SlimStat Analytics <= 5.3.3 - Unauthenticated Stored Cross-Site Scripting via 'fh' ParameterCVE-2025-15057 wp-slimstat WordPress High Fix reported
SlimStat Analytics <= 5.3.2 - Unauthenticated Stored Cross-Site ScriptingCVE-2025-14151 wp-slimstat WordPress High Fix reported
Slimstat Analytics <= 5.2.6 - Unauthenticated Stored Cross-Site ScriptingCVE-2024-9548 wp-slimstat WordPress High Fix reported
SlimStat Analytics <= 5.1.3 - Authenticated (Subscriber+) Stored Cross-Site ScriptingCVE-2024-1073 wp-slimstat WordPress Medium Fix reported
Slimstat Analytics <= 4.9.3.2 - Authenticated (Subscriber+) SQL Injection via ShortcodeCVE-2023-0630 wp-slimstat WordPress High Fix reported
Slimstat Analytics <= 4.8.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting wp-slimstat WordPress High Fix reported
Slimstat Analytics < 3.9.6 - Unauthenticated Blind SQL Injection wp-slimstat WordPress High Fix reported
Slimstat Analytics <= 3.9.2 - Cross-Site ScriptingCVE-2015-1204 wp-slimstat WordPress Medium Fix reported
Slimstat Analytics <= 5.0.5.1 - Missing Authorization via delete_pageviewCVE-2023-33994 wp-slimstat WordPress Medium Fix reported
Slimstat Analytics <= 4.9.3.3 - Authenticated (Subscriber+) SQL Injection via Shortcode wp-slimstat WordPress High Fix reported
Slimstat Analytics <= 4.9.2 - Reflected Cross-Site Scripting via REQUEST_URI wp-slimstat WordPress Medium Fix reported
Slimstat Analytics <= 3.5.5 - Stored Cross-Site ScriptingCVE-2014-100027 wp-slimstat WordPress Medium Fix reported