Slimstat Analytics vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

SA

Product

Slimstat Analytics

by veronalabs · last CVE Jun 17, 2026

10

CVEs

0

On KEV

8.5

Max CVSS

0

New 30D

Vulnerabilities10 In the news0 Timeline

Severity mix

Critical 0High 7Medium 3Low 0

Severity

All severities10 Critical0 High7 Medium3 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Slimstat Analytics to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-54818	8.5	0%	Jun 17	WordPress Slimstat Analytics plugin <= 5.4.11 - SQL Injection vulnerability Affected: through 5.4.11
CVE-2026-7634	7.2	0%	May 28	SlimStat Analytics <= 5.4.11 - Unauthenticated Stored Cross-Site Scripting via User-Agent Header Affected: through 5.4.11
CVE-2026-1238	7.2	0%	Mar 19	SlimStat Analytics <= 5.3.5 - Unauthenticated Stored Cross-Site Scripting via 'fh' Affected: through 5.3.5
CVE-2025-15055	7.2	0%	Jan 9	SlimStat Analytics <= 5.3.4 - Unauthenticated Stored Cross-Site Scripting via 'notes/resource' Parameters Affected: through 5.3.4
CVE-2025-15057	7.2	0%	Jan 9	SlimStat Analytics <= 5.3.3 - Unauthenticated Stored Cross-Site Scripting via 'fh' Parameter Affected: through 5.3.3
CVE-2025-14151	7.2	0%	Dec 19	SlimStat Analytics <= 5.3.2 - Unauthenticated Stored Cross-Site Scripting Affected: through 5.3.2
CVE-2025-69323	7.1	0%	Feb 20	WordPress Slimstat Analytics plugin <= 5.3.2 - Reflected Cross Site Scripting (XSS) vulnerability Affected: through 5.3.2