WP Statistics – The Most Popular Privacy-Friendly Analytics Plugin

Wordfence Intelligence   >   Vulnerability Database   >   WordPress Plugins   >   WP Statistics – The Most Popular Privacy-Friendly Analytics Plugin

Information

Software Type Plugin
Software Slug wp-statistics (view on wordpress.org)
Software Status Active
Software Author mostafas1990
Software Website wp-statistics.com
Software Downloads 23,769,691
Software Active Installs 600,000
Software Record Last Updated May 17, 2024

Showing 21-32 of 32 Vulnerabilities

WP Statistics <= 12.6.5 - Stored Cross-Site Scripting
6.4
CVE-2019-12566
May 31, 2019
Researchers:
WP Statistics <= 13.1.7 - Cross-Site Scripting
6.1
CVE-2022-27231
May 24, 2022
Researcher: Shogo Kumamaru
WP Statistics <= 13.2.1 - Reflected Cross-Site Scripting
6.1
CVE-2022-1005
May 11, 2022
Researcher: Taurus Omar
WP Statistics <= 13.0.9 - Reflected Cross-Site Scripting
6.1
CVE ID Unknown
Aug 30, 2021
Researcher: Vladislav Pokrovsky (ΞX.MI)
WP Statistics <= 12.6.3 - Referer Cross-Site Scripting
6.1
CVE-2019-10864
Apr 9, 2019
Researcher: Manuel Fernández-Aramburu
WP Statistics <= 12.0.9 - Authenticated Cross-Site Scripting
6.1
CVE-2017-10991
Jul 7, 2017
Researchers:
WP Statistics <= 12.0.8.1 - Reflected Cross-Site Scripting
6.1
CVE ID Unknown
Jul 3, 2017
Researchers:
WP Statistics <= 12.0.4 - Stored Cross-Site Scripting
6.1
CVE-2017-2136
Apr 13, 2017
Researcher: Gen Sato
WP Statistics <= 9.5.1 - Cross-Site Scripting
6.1
CVE ID Unknown
Aug 10, 2015
Researcher: Swift Security
WP Statistics <= 2.2.4 - Cross-Site Scripting
6.1
CVE ID Unknown
May 15, 2012
Researchers: Heine Pedersen, Torben Jensen
WP Statistics < 9.1.3 - Authenticated (Admin+) Stored Cross-Site Scripting
5.5
CVE ID Unknown
Apr 15, 2015
Researcher: Kaustubh G. Padwad
WP Statistics <= 13.2.5 - Information Disclosure
4.3
CVE ID Unknown
Sep 7, 2022
Researchers:
Title Status CVE ID CVSS Researchers Date
WP Statistics <= 12.6.5 - Stored Cross-Site Scripting Patched CVE-2019-12566 6.4 May 31, 2019
WP Statistics <= 13.1.7 - Cross-Site Scripting Patched CVE-2022-27231 6.1 Shogo Kumamaru May 24, 2022
WP Statistics <= 13.2.1 - Reflected Cross-Site Scripting Patched CVE-2022-1005 6.1 Taurus Omar May 11, 2022
WP Statistics <= 13.0.9 - Reflected Cross-Site Scripting Patched 6.1 Vladislav Pokrovsky (ΞX.MI) August 30, 2021
WP Statistics <= 12.6.3 - Referer Cross-Site Scripting Patched CVE-2019-10864 6.1 Manuel Fernández-Aramburu April 9, 2019
WP Statistics <= 12.0.9 - Authenticated Cross-Site Scripting Patched CVE-2017-10991 6.1 July 7, 2017
WP Statistics <= 12.0.8.1 - Reflected Cross-Site Scripting Patched 6.1 July 3, 2017
WP Statistics <= 12.0.4 - Stored Cross-Site Scripting Patched CVE-2017-2136 6.1 Gen Sato April 13, 2017
WP Statistics <= 9.5.1 - Cross-Site Scripting Patched 6.1 Swift Security August 10, 2015
WP Statistics <= 2.2.4 - Cross-Site Scripting Patched 6.1 Heine Pedersen, Torben Jensen May 15, 2012
WP Statistics < 9.1.3 - Authenticated (Admin+) Stored Cross-Site Scripting Patched 5.5 Kaustubh G. Padwad April 15, 2015
WP Statistics <= 13.2.5 - Information Disclosure Patched 4.3 September 7, 2022

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation