Slimstat Analytics
Approved changes feed: RSS · Atom
cpe:2.3:a:unknown:slimstat_analytics:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Unknown (668ca391-a6cc-5e33-879b-83885214de33) |
|---|---|
| Product | Slimstat Analytics (ff80c10b-6454-5330-af28-652362e99ff9) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-12592 |
vulnerable | 2026-07-29 00:23:32.459722 |
SlimStat Analytics < 5.5.0 - Unauthenticated Stored XSS via CF-IPCountry Header
The SlimStat Analytics WordPress plugin before 5.5.0 does not escape a visitor-controlled geolocation value before outputting it in its admin analytics reports, allowing unauthenticated visitors to store a cross-site scripting payload that executes in the browser of an administrator who views the reports. Exploitation requires the SlimStat Analytics WordPress plugin before 5.5.0 to be configured to use the Cloudflare geolocation provider.
Published: 2026-07-20T06:00:03.104Z
Updated: 2026-07-20T13:14:45.585Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-0630 |
vulnerable | 2026-06-08 05:52:32.106617 |
Slimstat Analytics < 4.9.3.3 - Subscriber+ SQL Injection
The Slimstat Analytics WordPress plugin before 4.9.3.3 does not prevent subscribers from rendering shortcodes that concatenates attributes directly into an SQL query.
Published: 2023-03-20T15:52:13.523Z
Updated: 2025-02-26T14:37:24.198Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-4310 |
vulnerable | 2026-06-08 05:51:37.178691 |
Slimstat Analytics < 4.9.3 - Unauthenticated Stored XSS
The Slimstat Analytics WordPress plugin before 4.9.3 does not sanitise and escape the URI when logging requests, which could allow unauthenticated attackers to perform Stored Cross-Site Scripting attacks against logged in admin viewing the logs
Published: 2023-01-09T22:13:26.488Z
Updated: 2025-04-09T19:23:59.359Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.