Login Request a demo
SA
Product
Slimstat Analytics
by veronalabs · last CVE Jun 17, 2026
9
CVEs
0
On KEV
8.5
Max CVSS
0
New 30D
Vulnerabilities9In the news0Timeline
Severity mix
Critical 0High 7Medium 2Low 0
Severity
All severities9Critical0High7Medium2Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Slimstat Analytics to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-54818
8.5
0%
Jun 17
WordPress Slimstat Analytics plugin <= 5.4.11 - SQL Injection vulnerability
Affected: through 5.4.11
CVE-2026-7634
7.2
0%
May 28
SlimStat Analytics <= 5.4.11 - Unauthenticated Stored Cross-Site Scripting via User-Agent Header
Affected: through 5.4.11
CVE-2026-1238
7.2
0%
Mar 19
SlimStat Analytics <= 5.3.5 - Unauthenticated Stored Cross-Site Scripting via 'fh'
Affected: through 5.3.5
CVE-2025-15055
7.2
0%
Jan 9
SlimStat Analytics <= 5.3.4 - Unauthenticated Stored Cross-Site Scripting via 'notes/resource' Parameters
Affected: through 5.3.4
CVE-2025-15057
7.2
0%
Jan 9
SlimStat Analytics <= 5.3.3 - Unauthenticated Stored Cross-Site Scripting via 'fh' Parameter
Affected: through 5.3.3
CVE-2025-14151
7.2
0%
Dec 19
SlimStat Analytics <= 5.3.2 - Unauthenticated Stored Cross-Site Scripting
Affected: through 5.3.2
CVE-2025-69323
7.1
0%
Feb 20
WordPress Slimstat Analytics plugin <= 5.3.2 - Reflected Cross Site Scripting (XSS) vulnerability
Affected: through 5.3.2
CVE-2026-27410
6.5
0%
Jun 17
WordPress Slimstat Analytics plugin < 5.4.0 - Deserialization of untrusted data vulnerability
Affected: before 5.4.0
CVE-2025-13431
6.5
0%
Feb 11
SlimStat Analytics <= 5.3.1 - Authenticated (Subscriber+) SQL Injection via `args` Parameter
Affected: through 5.3.1
Showing 9