WP Statistics

Wordfence Intelligence   >   Vulnerability Database   >   WordPress Plugins   >   WP Statistics

Information

Software Type Plugin
Software Slug wp-statistics (view on wordpress.org)
Software Status Active
Software Author mostafas1990
Software Website wp-statistics.com
Software Downloads 18,434,248
Software Active Installs 600,000
Software Record Last Updated May 30, 2023

Showing 1-20 of 31 vulnerabilities

WP Statistics <= 13.2.16 - Authenticated (Admin+) SQL Injection
7.2
CVE-2023-0955
Mar 6, 2023
Researcher: Erwan LR
WP Statistics <= 13.2.10 - Authenticated (Subscriber+) SQL Injection
8.8
CVE-2022-38074
Jan 31, 2023
Researcher: Rafie Muhammad
WP Statistics <= 13.2.8 - Authenticated (Admin+) SQL Injection
7.2
CVE-2022-4230
Dec 27, 2022
Researcher: Jordy Versmissen
WP Statistics <= 13.2.5 - Authenticated (Subscriber+) SQL Injection
8.8
CVE ID Unknown
Sep 8, 2022
Researchers:
WP Statistics <= 13.2.5 - Information Disclosure
4.3
CVE ID Unknown
Sep 7, 2022
Researchers:
WP Statistics <= 13.1.7 - Cross-Site Scripting
6.1
CVE-2022-27231
May 24, 2022
Researcher: Shogo Kumamaru
WP Statistics <= 13.2.1 - Reflected Cross-Site Scripting
6.1
CVE-2022-1005
May 11, 2022
Researcher: Taurus Omar
WP Statistics <= 13.1.5 - Unauthenticated Stored Cross-Site Scripting via platform
7.2
CVE-2022-25307
Feb 17, 2022
Researcher: Muhammad Zeeshan (Xib3rR4dAr)
WP Statistics <= 13.1.5 - Unauthenticated Blind SQL Injection via current_page_type
9.8
CVE-2022-0651
Feb 16, 2022
Researcher: Muhammad Zeeshan (Xib3rR4dAr)
WP Statistics <= 13.1.5 - Unauthenticated SQL Injection
9.8
CVE-2022-25148
Feb 16, 2022
Researcher: Muhammad Zeeshan (Xib3rR4dAr)
WP Statistics <= 13.1.5 - Unauthenticated Stored Cross-Site Scripting via IP
7.2
CVE-2022-25305
Feb 16, 2022
Researcher: Muhammad Zeeshan (Xib3rR4dAr)
WP Statistics <= 13.1.5 - Unauthenticated Blind SQL Injection via IP
9.8
CVE-2022-25149
Feb 16, 2022
Researcher: Muhammad Zeeshan (Xib3rR4dAr)
WP Statistics <= 13.1.5 - Unauthenticated Stored Cross-Site Scripting via browser
7.2
CVE-2022-25306
Feb 16, 2022
Researcher: Muhammad Zeeshan (Xib3rR4dAr)
WP Statistics <= 13.1.4 - Unauthenticated Blind SQL Injection
9.8
CVE-2022-0513
Feb 10, 2022
Researcher: Cyku Hong
WP Statistics <= 13.1.1 - Cross-Site Request Forgery to Arbitrary Plugin Activation and Deactivation
6.5
CVE-2021-4333
Sep 11, 2021
Researcher: Ramuel Gall
WP Statistics <= 13.0.9 - Reflected Cross-Site Scripting
6.1
CVE ID Unknown
Aug 30, 2021
Researcher: FearZzZz
WP Statistics <= 13.0.7 - Unauthenticated SQL Injection
7.5
CVE-2021-24340
May 19, 2021
Researcher: Ramuel Gall
WP Statistics <= 12.6.6.1 - Unauthenticated Stored Cross-Site Scripting via IP Manipulation
7.2
CVE ID Unknown
Jul 1, 2019
Researcher: Antony Garand
WP Statistics <= 12.6.6.1 - Unauthenticated Blind SQL Injection
9.8
CVE-2019-13275
Jul 1, 2019
Researcher: Thomas Chauchefoin
WP Statistics <= 12.6.5 - Stored Cross-Site Scripting
6.4
CVE-2019-12566
May 31, 2019
Researchers:
Title CVE ID CVSS Researchers Date
WP Statistics <= 13.2.16 - Authenticated (Admin+) SQL Injection CVE-2023-0955 7.2 Erwan LR March 6, 2023
WP Statistics <= 13.2.10 - Authenticated (Subscriber+) SQL Injection CVE-2022-38074 8.8 Rafie Muhammad January 31, 2023
WP Statistics <= 13.2.8 - Authenticated (Admin+) SQL Injection CVE-2022-4230 7.2 Jordy Versmissen December 27, 2022
WP Statistics <= 13.2.5 - Authenticated (Subscriber+) SQL Injection 8.8 September 8, 2022
WP Statistics <= 13.2.5 - Information Disclosure 4.3 September 7, 2022
WP Statistics <= 13.1.7 - Cross-Site Scripting CVE-2022-27231 6.1 Shogo Kumamaru May 24, 2022
WP Statistics <= 13.2.1 - Reflected Cross-Site Scripting CVE-2022-1005 6.1 Taurus Omar May 11, 2022
WP Statistics <= 13.1.5 - Unauthenticated Stored Cross-Site Scripting via platform CVE-2022-25307 7.2 Muhammad Zeeshan (Xib3rR4dAr) February 17, 2022
WP Statistics <= 13.1.5 - Unauthenticated Blind SQL Injection via current_page_type CVE-2022-0651 9.8 Muhammad Zeeshan (Xib3rR4dAr) February 16, 2022
WP Statistics <= 13.1.5 - Unauthenticated SQL Injection CVE-2022-25148 9.8 Muhammad Zeeshan (Xib3rR4dAr) February 16, 2022
WP Statistics <= 13.1.5 - Unauthenticated Stored Cross-Site Scripting via IP CVE-2022-25305 7.2 Muhammad Zeeshan (Xib3rR4dAr) February 16, 2022
WP Statistics <= 13.1.5 - Unauthenticated Blind SQL Injection via IP CVE-2022-25149 9.8 Muhammad Zeeshan (Xib3rR4dAr) February 16, 2022
WP Statistics <= 13.1.5 - Unauthenticated Stored Cross-Site Scripting via browser CVE-2022-25306 7.2 Muhammad Zeeshan (Xib3rR4dAr) February 16, 2022
WP Statistics <= 13.1.4 - Unauthenticated Blind SQL Injection CVE-2022-0513 9.8 Cyku Hong February 10, 2022
WP Statistics <= 13.1.1 - Cross-Site Request Forgery to Arbitrary Plugin Activation and Deactivation CVE-2021-4333 6.5 Ramuel Gall September 11, 2021
WP Statistics <= 13.0.9 - Reflected Cross-Site Scripting 6.1 FearZzZz August 30, 2021
WP Statistics <= 13.0.7 - Unauthenticated SQL Injection CVE-2021-24340 7.5 Ramuel Gall May 19, 2021
WP Statistics <= 12.6.6.1 - Unauthenticated Stored Cross-Site Scripting via IP Manipulation 7.2 Antony Garand July 1, 2019
WP Statistics <= 12.6.6.1 - Unauthenticated Blind SQL Injection CVE-2019-13275 9.8 Thomas Chauchefoin July 1, 2019
WP Statistics <= 12.6.5 - Stored Cross-Site Scripting CVE-2019-12566 6.4 May 31, 2019

All the threat data shared in this database is powered by Wordfence Intelligence Enterprise.
Interested in integrating this data into your platform or network?
Contact us now to discuss API access to our Wordfence Intelligence Enterprise Data Feeds.

Inquire Now

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation