Advisories · Technology
VeronaLabs WP Statistics.
Every CVE that names VeronaLabs WP Statistics among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.1 High
WordPress WP Statistics plugin <= 14.16.14 - Cross Site Scripting (XSS) vulnerability
- VeronaLabs WP Statistics
- Cross-site scripting (XSS)
- CVSS 7.1 High
WordPress WP Statistics plugin <= 14.16.13 - Cross Site Scripting (XSS) vulnerability
- VeronaLabs WP Statistics
- Cross-site scripting (XSS)
- CVSS 6.1 Medium
WordPress WP Statistics plugin <= 14.16.11 - Cross Site Scripting (XSS) vulnerability
- VeronaLabs WP Statistics
- Cross-site scripting (XSS)
- CVSS 7.1 High
WordPress WP Statistics plugin <= 14.16.6 - Cross Site Scripting (XSS) vulnerability
- VeronaLabs WP Statistics
- Cross-site scripting (XSS)
- CVSS 4.3 Medium
WordPress WP Statistics Plugin <= 14.15 - Broken Access Control Vulnerability
- VeronaLabs WP Statistics
- Broken access control
- CVSS 9.9 CriticalCritical · CVSS 9+
WordPress WP Statistics Plugin <= 13.2.10 is vulnerable to SQL Injection
- VeronaLabs WP Statistics
- SQL injection
-
VeronaLabs WP Statistics: Cross-site scripting vulnerability exists in WP Statistics versions prior to 13.2.0…
- VeronaLabs WP Statistics
- CVSS 9.8 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS
WP Statistics <= 13.1.4 Unauthenticated Blind SQL Injection via exclusion_reason
- VeronaLabs WP Statistics
- SQL injection
-
WP Statistics < 13.0.8 - Unauthenticated SQL Injection
- VeronaLabs WP Statistics
- SQL injection