Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
wp-stats-manager
WordPress
· Plugin
20 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
WP Visitor Statistics (Real Time Traffic) <= 8.9.0 - Unauthenticated Stored Cross-Site Scripting via 'os' / 'browser' / 'res' Tracker Parameters
CVE-2026-111370
wp-stats-manager
WordPress
High
Fix reported
2026-11-07
WP Visitor Statistics (Real Time Traffic) <= 8.7.1 - Unauthenticated Stored Cross-Site Scripting via 'browser' Parameter
CVE-2026-109230
wp-stats-manager
WordPress
High
Fix reported
2026-11-07
Visitor Statistics (Real Time Traffic) <= 8.7 - Authenticated (Administrator+) SQL Injection
CVE-2026-117572
wp-stats-manager
WordPress
Medium
Fix reported
2026-11-03
Visitor Statistics (Real Time Traffic) <= 8.7 - Unauthenticated Stored Cross-Site Scripting
CVE-2026-117571
wp-stats-manager
WordPress
High
Fix reported
2026-11-03
WP Visitor Statistics (Real Time Traffic) <= 8.8 - Authenticated (Contributor+) SQL Injection via 'from' Shortcode Attribute
CVE-2026-116609
wp-stats-manager
WordPress
Medium
Fix reported
2026-10-28
WP Visitor Statistics (Real Time Traffic) <= 8.7 - Unauthenticated SQL Injection via 'fullRef' Parameter
CVE-2026-96267
wp-stats-manager
WordPress
High
Fix reported
2026-10-03
WP Visitor Statistics (Real Time Traffic) <= 8.4 - Missing Authorization
CVE-2025-49996
wp-stats-manager
WordPress
Medium
Fix reported
2026-04-14
WP Visitor Statistics (Real Time Traffic) <= 8.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'height' Shortcode Attribute
CVE-2026-4303
wp-stats-manager
WordPress
Medium
Fix reported
2026-04-08
Visitor Statistics (Real Time Traffic) <= 8.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2025-67983
wp-stats-manager
WordPress
Medium
Fix reported
2025-12-19
PressApps Knowledge Base Contextual Sidebar Addon <= 4.2.1 - Unauthenticated PHP Object Injection
CVE-2025-49400
pressapps-knowledge-base
wp-stats-manager
WordPress
High
Fix reported
2025-08-26
WP Visitor Statistics (Real Time Traffic) <= 7.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2025-53566
wp-stats-manager
WordPress
Medium
Fix reported
2025-07-08
WP Visitor Statistics (Real Time Traffic) <= 7.5 - Missing Authorization
CVE-2025-22304
wp-stats-manager
WordPress
Medium
Fix reported
2025-02-03
WP Visitor Statistics (Real Time Traffic) <= 7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2025-24675
wp-stats-manager
WordPress
Medium
Fix reported
2025-01-28
WP Visitor Statistics (Real Time Traffic) <= 6.9.4 - Sensitive Information Exposure via Log File
CVE-2024-24867
wp-stats-manager
WordPress
Medium
Fix reported
2024-02-05
WP Visitor Statistics (Real Time Traffic) <= 6.8.1 - Unauthenticated SQL Injection
CVE-2023-0600
wp-stats-manager
WordPress
Critical
Fix reported
2024-01-22
WP Visitor Statistics (Real Time Traffic) <= 5.5 - SQL Injection
CVE-2022-0410
wp-stats-manager
WordPress
High
Fix reported
2024-01-22
WP Visitor Statistics (Real Time Traffic) <= 4.7 - SQL Injection
CVE-2021-24750
wp-stats-manager
WordPress
High
Fix reported
2024-01-22
WP Visitor Statistics (Real Time Traffic) <= 5.7 - Unauthenticated SQL Injection
CVE-2022-33965
wp-stats-manager
WordPress
Critical
Fix reported
2024-01-22
WP Visitor Statistics (Real Time Traffic) <= 6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
CVE-2022-4656
wp-stats-manager
WordPress
Medium
Fix reported
2024-01-22
WP Visitor Statistics (Real Time Traffic) <= 5.4 - Missing Authorization to Stored Cross-Site Scripting
CVE-2021-25042
wp-stats-manager
WordPress
Medium
Fix reported
2024-01-22
