WP Statistics – The Most Popular Privacy-Friendly Analytics Plugin

Wordfence Intelligence   >   Vulnerability Database   >   WordPress Plugins   >   WP Statistics – The Most Popular Privacy-Friendly Analytics Plugin

Information

Software Type Plugin
Software Slug wp-statistics (view on wordpress.org)
Software Status Active
Software Author mostafas1990
Software Website wp-statistics.com
Software Downloads 23,517,144
Software Active Installs 600,000
Software Record Last Updated May 3, 2024

Showing 21-32 of 32 Vulnerabilities

WP Statistics <= 12.6.5 - Stored Cross-Site Scripting
6.4
CVE-2019-12566
May 31, 2019
Researchers:
WP Statistics <= 12.6.3 - Referer Cross-Site Scripting
6.1
CVE-2019-10864
Apr 9, 2019
Researcher: Manuel Fernández-Aramburu
WP Statistics <= 12.0.9 - Authenticated Cross-Site Scripting
6.1
CVE-2017-10991
Jul 7, 2017
Researchers:
WP Statistics <= 12.0.8.1 - Reflected Cross-Site Scripting
6.1
CVE ID Unknown
Jul 3, 2017
Researchers:
WP Statistics <= 12.0.7 - Authenticated SQL Injection
8.8
CVE-2017-18515
Jun 30, 2017
Researchers:
WP Statistics <= 12.0.4 - Stored Cross-Site Scripting
6.1
CVE-2017-2136
Apr 13, 2017
Researcher: Gen Sato
WP Statistics <= 9.5.1 - Cross-Site Scripting
6.1
CVE ID Unknown
Aug 10, 2015
Researcher: Swift Security
WP Statistics < 9.4.1 - Authenticated Blind SQL Injection
8.7
CVE ID Unknown
Jul 9, 2015
Researcher: Marcin Probola
WP Statistics < 9.1.3 - Authenticated (Admin+) Stored Cross-Site Scripting
5.5
CVE ID Unknown
Apr 15, 2015
Researcher: Kaustubh G. Padwad
WP Statistics <= 8.4 - Stored Cross-Site Scripting
7.2
CVE ID Unknown
Dec 3, 2014
Researchers:
WP Statistics < 8.3.1 - Multiple Cross-Site Scripting
7.2
CVE ID Unknown
Nov 20, 2014
Researcher: Marc-Alexandre Montpas
WP Statistics <= 2.2.4 - Cross-Site Scripting
6.1
CVE ID Unknown
May 15, 2012
Researchers: Heine Pedersen, Torben Jensen
Title CVE ID CVSS Researchers Date
WP Statistics <= 12.6.5 - Stored Cross-Site Scripting CVE-2019-12566 6.4 May 31, 2019
WP Statistics <= 12.6.3 - Referer Cross-Site Scripting CVE-2019-10864 6.1 Manuel Fernández-Aramburu April 9, 2019
WP Statistics <= 12.0.9 - Authenticated Cross-Site Scripting CVE-2017-10991 6.1 July 7, 2017
WP Statistics <= 12.0.8.1 - Reflected Cross-Site Scripting 6.1 July 3, 2017
WP Statistics <= 12.0.7 - Authenticated SQL Injection CVE-2017-18515 8.8 June 30, 2017
WP Statistics <= 12.0.4 - Stored Cross-Site Scripting CVE-2017-2136 6.1 Gen Sato April 13, 2017
WP Statistics <= 9.5.1 - Cross-Site Scripting 6.1 Swift Security August 10, 2015
WP Statistics < 9.4.1 - Authenticated Blind SQL Injection 8.7 Marcin Probola July 9, 2015
WP Statistics < 9.1.3 - Authenticated (Admin+) Stored Cross-Site Scripting 5.5 Kaustubh G. Padwad April 15, 2015
WP Statistics <= 8.4 - Stored Cross-Site Scripting 7.2 December 3, 2014
WP Statistics < 8.3.1 - Multiple Cross-Site Scripting 7.2 Marc-Alexandre Montpas November 20, 2014
WP Statistics <= 2.2.4 - Cross-Site Scripting 6.1 Heine Pedersen, Torben Jensen May 15, 2012

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation