WS
Product
WP Statistics – Simple, privacy-friendly Google Analytics alternative
6
CVEs
0
On KEV
7.2
Max CVSS
1
New 30D
Severity mix
Critical 0High 3Medium 3Low 0
Watch
Add WP Statistics – Simple, privacy-friendly Google Analytics alternative to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-15780 | 7.2 | Aug 19 | WP Statistics <= 14.16.8 - Unauthenticated Stored Cross-Site Scripting via 'utm_campaign' Parameter Affected: through 14.16.8 |
| CVE-2026-5231 | 7.2 | Apr 17 | WP Statistics <= 14.16.4 - Unauthenticated Stored Cross-Site Scripting via 'utm_source' Parameter Affected: through 14.16.4 |
| CVE-2025-9816 | 7.2 | Sep 27 | WP Statistics <= 14.5.4 - Unauthenticated Stored Cross-Site Scripting via User-Agent Header Affected: through 14.15.4 |
Showing 3