WP Visitor Statistics (Real Time Traffic) vulnerabilities

Product

WP Visitor Statistics (Real Time Traffic)

by osamaesh · last CVE Oct 28, 2026

CVEs

On KEV

7.5

Max CVSS

New 30D

Severity mix

Critical 0High 1Medium 2Low 0

Severity

Exploitation

Watch

Add WP Visitor Statistics (Real Time Traffic) to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-116609 New	6.5	–	Oct 28	WP Visitor Statistics (Real Time Traffic) <= 8.8 - Authenticated (Contributor+) SQL Injection via 'from' Shortcode Attribute Affected: through 8.8
CVE-2026-4303	6.4	0%	Apr 8	WP Visitor Statistics (Real Time Traffic) <= 8.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'height' Shortcode Attribute Affected: through 8.4