Unknown Slimstat Analytics vulnerabilities

3 vulnerabilities

Known vulnerabilities in Unknown Slimstat Analytics, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.2CVE-2022-4310unknownslimstat analytics+2
EPSS score
0.65%
The Slimstat Analytics WordPress plugin before 4.9.3 does not sanitise and escape the URI when logging requests, which could allow unauthenticated attackers to perform Stored Cross-Site Scripting attacks against logged in admin viewing the logs7.5CVE-2026-12592unknownslimstat analytics+1
EPSS score
0.35%
The SlimStat Analytics WordPress plugin before 5.5.0 does not escape a visitor-controlled geolocation value before outputting it in its admin analytics reports, allowing unauthenticated visitors to store a cross-site scripting payload that executes in the browser of an administrator who views the reports. Exploitation requires the SlimStat Analytics WordPress plugin before 5.5.0 to be configured to use the Cloudflare geolocation provider.8.8CVE-2023-0630unknownslimstat analytics+2
EPSS score
5.14%
The Slimstat Analytics WordPress plugin before 4.9.3.3 does not prevent subscribers from rendering shortcodes that concatenates attributes directly into an SQL query.