# osamaesh WP Visitor Statistics (Real Time Traffic).

Every CVE that names osamaesh WP Visitor Statistics (Real Time Traffic) among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [WP Visitor Statistics (Real Time Traffic) <= 8.8 - Authenticated (Contributor+) SQL Injection via 'from' Shortcode Attribute](https://agentprime.io/advisories/CVE-2026-116609.md)
  `CVE-2026-116609` · CVE record: osamaesh WP Visitor Statistics (Real Time Traffic) · CVSS 6.5 Medium · Not analysed yet · Published 28 Oct 2026 · Tags: SQL injection
- [WP Visitor Statistics (Real Time Traffic) <= 8.7 - Unauthenticated SQL Injection via 'fullRef' Parameter](https://agentprime.io/advisories/CVE-2026-96267.md)
  `CVE-2026-96267` · CVE record: osamaesh WP Visitor Statistics (Real Time Traffic) · CVSS 7.5 High · Not analysed yet · Published 3 Oct 2026 · Tags: SQL injection
- [WP Visitor Statistics (Real Time Traffic) <= 8.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'height' Shortcode Attribute](https://agentprime.io/advisories/CVE-2026-4303.md)
  `CVE-2026-4303` · CVE record: osamaesh WP Visitor Statistics (Real Time Traffic) · CVSS 6.4 Medium · Not analysed yet · Published 8 Apr 2026 · Tags: Cross-site scripting (XSS)
- [WordPress WP Stats Manager plugin <= 6.9.4 - Sensitive Data Exposure vulnerability](https://agentprime.io/advisories/CVE-2024-24867.md)
  `CVE-2024-24867` · CVE record: Osamaesh WP Visitor Statistics (Real Time Traffic) · CVSS 5.3 Medium · Not analysed yet · Published 17 Mar 2024 · Tags: Information disclosure

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=osamaesh-wp-visitor-statistics-real-time-traffic>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/osamaesh-wp-visitor-statistics-real-time-traffic/>. Everything for agents: <https://agentprime.io/llms.txt>.