Advisories · Technology

VeronaLabs Slimstat Analytics.

Every CVE that names VeronaLabs Slimstat Analytics among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-54818 CVE record

CVSS 8.5 High

WordPress Slimstat Analytics plugin <= 5.4.11 - SQL Injection vulnerability
- VeronaLabs Slimstat Analytics
- SQL injection
Not analysed yet 17 Jun 2026
CVE-2026-27410 CVE record

CVSS 6.5 Medium

WordPress Slimstat Analytics plugin < 5.4.0 - Deserialization of untrusted data vulnerability
- VeronaLabs Slimstat Analytics
- Insecure deserialization
Not analysed yet 17 Jun 2026
CVE-2026-7634 CVE record

CVSS 7.2 High

SlimStat Analytics <= 5.4.11 - Unauthenticated Stored Cross-Site Scripting via User-Agent Header
- veronalabs SlimStat Analytics
- Cross-site scripting (XSS)
Not analysed yet 28 May 2026
CVE-2026-1238 CVE record

CVSS 7.2 High

SlimStat Analytics <= 5.3.5 - Unauthenticated Stored Cross-Site Scripting via 'fh'
- veronalabs SlimStat Analytics
- Cross-site scripting (XSS)
Not analysed yet 19 Mar 2026
CVE-2025-69323 CVE record

CVSS 7.1 High

WordPress Slimstat Analytics plugin <= 5.3.2 - Reflected Cross Site Scripting (XSS) vulnerability
- VeronaLabs Slimstat Analytics
- Cross-site scripting (XSS)
Not analysed yet 20 Feb 2026
CVE-2025-13431 CVE record

CVSS 6.5 Medium

SlimStat Analytics <= 5.3.1 - Authenticated (Subscriber+) SQL Injection via `args` Parameter
- veronalabs SlimStat Analytics
- SQL injection
Not analysed yet 11 Feb 2026
CVE-2025-15055 CVE record

CVSS 7.2 High

SlimStat Analytics <= 5.3.4 - Unauthenticated Stored Cross-Site Scripting via 'notes/resource' Parameters
- veronalabs SlimStat Analytics
- Cross-site scripting (XSS)
Not analysed yet 9 Jan 2026
CVE-2025-15057 CVE record

CVSS 7.2 High

SlimStat Analytics <= 5.3.3 - Unauthenticated Stored Cross-Site Scripting via 'fh' Parameter
- veronalabs SlimStat Analytics
- Cross-site scripting (XSS)
Not analysed yet 9 Jan 2026
CVE-2025-14151 CVE record

CVSS 7.2 High

SlimStat Analytics <= 5.3.2 - Unauthenticated Stored Cross-Site Scripting
- veronalabs SlimStat Analytics
- Cross-site scripting (XSS)
Not analysed yet 19 Dec 2025
CVE-2023-33994 CVE record

CVSS 6.5 Medium

WordPress Slimstat Analytics plugin <= 5.0.5.1 - Broken Access Control vulnerability
- VeronaLabs Slimstat Analytics
- Broken access control
Not analysed yet 13 Dec 2024
CVE-2024-9548 CVE record

CVSS 7.2 High

Slimstat Analytics <= 5.2.6 - Unauthenticated Stored Cross-Site Scripting
- veronalabs SlimStat Analytics
- Cross-site scripting (XSS)
Not analysed yet 14 Oct 2024
CVE-2024-1073 CVE record

CVSS 6.4 Medium

SlimStat Analytics <= 5.1.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting
- veronalabs SlimStat Analytics
- Cross-site scripting (XSS)
Not analysed yet 2 Feb 2024
CVE-2023-4598 CVE record

CVSS 8.8 High

Slimstat Analytics <= 5.0.9 - Authenticated (Contributor+) Blind SQL Injection via Shortcode
- veronalabs SlimStat Analytics
- SQL injection
Not analysed yet 20 Oct 2023
CVE-2023-4597 CVE record

CVSS 6.4 Medium

Slimstat Analytics <= 5.0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
- veronalabs SlimStat Analytics
- Cross-site scripting (XSS)
Not analysed yet 30 Aug 2023