Veronalabs Wp Statistics vulnerabilities, page 2

24 vulnerabilities

Known vulnerabilities in Veronalabs Wp Statistics, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.2CVE-2026-48839veronalabswp_statistics+1
EPSS score
0.25%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VeronaLabs WP Statistics allows DOM-Based XSS. This issue affects WP Statistics: from n/a through 14.16.6.7.2CVE-2026-93770veronalabswp_statistics+1
EPSS score
0.20%
Unauthenticated Cross Site Scripting (XSS) in WP Statistics <= 14.16.13 versions.7.1CVE-2026-97276veronalabswp_statistics+1
EPSS score
0.15%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VeronaLabs WP Statistics wp-statistics allows Reflected XSS.This issue affects WP Statistics: from n/a through 14.16.14.8.8CVE-2023-0955unknownwp statistics+2
EPSS score
0.90%
The WP Statistics WordPress plugin before 14.0 does not escape a parameter, which could allow authenticated users to perform SQL Injection attacks. By default, the affected feature is available to users with the manage_options capability (admin+), however the plugin has a settings to allow low privilege users to access it as well.