Login Request a demo
WS
Product
WP Statistics
by VeronaLabs · last CVE Oct 4, 2026
24
CVEs
0
On KEV
9.8
Max CVSS
2
New 30D
Vulnerabilities24In the news0Timeline
Severity mix
Critical 3High 10Medium 11Low 0
Severity
All severities24Critical3High10Medium11Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add WP Statistics to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-0955
8.8
1%
Mar 27
The WP Statistics WordPress plugin before 14.0 does not escape a parameter, which could allow authenticated users to perform SQL Injection attacks
Affected: before 14.0
CVE-2022-38074
8.8
1%
Mar 13
SQL Injection vulnerability in VeronaLabs WP Statistics plugin <= 13.2.10 versions
Affected: before 13.2.11
CVE-2022-4230
8.8
36%
Jan 23
The WP Statistics WordPress plugin before 13.2.9 does not escape a parameter, which could allow authenticated users to perform SQL Injection attacks
Affected: before 13.2.9
CVE-2022-25149
7.5
77%
Feb 24
The WP Statistics WordPress plugin is vulnerable to SQL Injection due to insufficient escaping and parameterization of the IP parameter found in the…
Affected: through 13.1.5
CVE-2022-0651
7.5
32%
Feb 24
The WP Statistics WordPress plugin is vulnerable to SQL Injection due to insufficient escaping and parameterization of the current_page_type parameter found in the…
Affected: through 13.1.5
CVE-2022-0513
7.5
53%
Feb 16
The WP Statistics WordPress plugin is vulnerable to SQL Injection due to insufficient escaping and parameterization of the exclusion_reason parameter found in the…
Affected: through 13.1.4
CVE-2021-24340
7.5
30%
Jun 7
The WP Statistics WordPress plugin before 13.0.8 relied on using the WordPress esc_sql() function on a field not delimited by quotes and did not first prepare the query
Affected: before 13.0.8
CVE-2026-97276
7.1
0%
Oct 4
WordPress WP Statistics plugin <= 14.16.14 - Cross Site Scripting (XSS) vulnerability
Affected: through 14.16.14
CVE-2026-93770
7.1
0%
Sep 30
WordPress WP Statistics plugin <= 14.16.13 - Cross Site Scripting (XSS) vulnerability
Affected: through 14.16.13
CVE-2026-48839
7.1
0%
Jun 1
WordPress WP Statistics plugin <= 14.16.6 - Cross Site Scripting (XSS) vulnerability
Affected: through 14.16.6
Showing 10