newstatpress

WordPress · Plugin

13 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
NewStatPress <= 1.4.5 - Unauthenticated Stored Cross-Site Scripting via 'urlrequested' Attribute via Query StringCVE-2026-101924	newstatpress	WordPress	High	No fix reported	2026-10-14
NewStatPress <= 1.4.5 - Unauthenticated Stored Cross-Site Scripting via URL Request Tracking (urlrequested field)CVE-2026-100153	newstatpress	WordPress	High	No fix reported	2026-10-14
NewStatPress < 1.4.5 - Unauthenticated Stored Cross-Site ScriptingCVE-2026-14845	newstatpress	WordPress	High	Fix reported	2026-08-13
NewStatPress <= 1.4.3 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2025-13747	newstatpress	WordPress	Medium	Fix reported	2026-01-09
NewStatPress <= 0.9.8 - Authenticated Cross-Site ScriptingCVE-2015-4063	newstatpress	WordPress	Medium	Fix reported	2024-01-22
NewStatPress <= 1.0.3 - Stored Cross-Site ScriptingCVE-2015-9314	newstatpress	WordPress	High	Fix reported	2024-01-22
NewStatPress < 1.2.5 - Unauthenticated Stored Cross-Site ScriptingCVE-2017-18575	newstatpress	WordPress	High	Fix reported	2024-01-22
NewStatPress <= 0.9.8 - Authenticated SQL InjectionCVE-2015-4062	newstatpress	WordPress	High	Fix reported	2024-01-22
NewStatPress <= 1.0.0 - SQL InjectionCVE-2015-9315	newstatpress	WordPress	Critical	Fix reported	2024-01-22
NewStatPress <= 1.0.6 - Reflected Cross-Site ScriptingCVE-2015-9311	newstatpress	WordPress	Medium	Fix reported	2024-01-22
NewStatPress < 1.0.6 - Reflected Cross-Site ScriptingCVE-2015-9312	newstatpress	WordPress	Medium	Fix reported	2024-01-22
NewStatPress < 1.0.6 - SQL InjectionCVE-2015-9313	newstatpress	WordPress	Critical	Fix reported	2024-01-22
NewStatPress <= 1.3.5 - Reflected Cross-Site ScriptingCVE-2022-0206	newstatpress	WordPress	Medium	Fix reported	2024-01-22