Wp Statistics
Approved changes feed: RSS · Atom
cpe:2.3:a:veronalabs:wp_statistics:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Veronalabs (5cbc0319-c96e-5a7f-a4fa-60728b747b85) |
|---|---|
| Product | Wp Statistics (731b0e45-6a4a-5e84-9c30-9a771998dc9d) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/wp-statistics/wp-statistics |
purl2cpe | 2026-06-01 10:11:36.851654 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-48839 |
vulnerable | 2026-06-08 08:05:12.327720 |
WordPress WP Statistics plugin <= 14.16.6 - Cross Site Scripting (XSS) vulnerability
HIGH (7.1)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VeronaLabs WP Statistics allows DOM-Based XSS.
This issue affects WP Statistics: from n/a through 14.16.6.
Published: 2026-06-01T14:43:29.590Z
Updated: 2026-06-01T16:18:50.112Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-55716 |
vulnerable | 2026-06-08 07:33:15.286497 |
WordPress WP Statistics Plugin <= 14.15 - Broken Access Control Vulnerability
MEDIUM (4.3)
Missing Authorization vulnerability in VeronaLabs WP Statistics wp-statistics allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Statistics: from n/a through <= 14.15.
Published: 2025-08-14T18:21:23.962Z
Updated: 2026-04-28T16:13:37.332Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-38074 |
vulnerable | 2026-06-08 05:47:14.537870 |
WordPress WP Statistics Plugin <= 13.2.10 is vulnerable to SQL Injection
CRITICAL (9.9)
SQL Injection vulnerability in VeronaLabs WP Statistics plugin <= 13.2.10 versions.
Published: 2023-03-13T13:43:34.752Z
Updated: 2026-04-28T16:07:46.976Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-27231 |
vulnerable | 2026-06-08 05:41:55.051182 |
Details available
Cross-site scripting vulnerability exists in WP Statistics versions prior to 13.2.0 because it improperly processes a platform parameter. By exploiting this vulnerability, an arbitrary script may be executed on the web browser of the user who is logging in to the website using the product.
Published: 2022-06-13T04:50:30.000Z
Updated: 2024-08-03T05:25:32.082Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-0513 |
vulnerable | 2026-06-08 05:39:10.187707 |
WP Statistics <= 13.1.4 Unauthenticated Blind SQL Injection via exclusion_reason
CRITICAL (9.8)
The WP Statistics WordPress plugin is vulnerable to SQL Injection due to insufficient escaping and parameterization of the exclusion_reason parameter found in the ~/includes/class-wp-statistics-exclusion.php file which allows attackers without authentication to inject arbitrary SQL queries to obtain sensitive information, in versions up to and including 13.1.4. This requires the "Record Exclusions" option to be enabled on the vulnerable site.
Published: 2022-02-16T16:38:03.000Z
Updated: 2025-02-10T14:53:42.447Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-24340 |
vulnerable | 2026-06-08 05:30:04.214036 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.