Login Request a demo
VE
Vendor
VeronaLabs
4 products with CVEs on record
53
CVEs
0
On KEV
3
New 30D
Products
WS
WP Statistics
VeronaLabs
9.8
24 CVEs0 on KEV2 new
WS
WP Statistics – Simple, privacy-friendly Google Analytics alternative
veronalabs
7.2
6 CVEs0 on KEV1 new
WS
WP SMS
VeronaLabs
9.8
14 CVEs0 on KEV0 new
SA
Slimstat Analytics
veronalabs
8.5
9 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-97276
WS
WP Statistics
VeronaLabs
7.1
0%
Oct 4WordPress WP Statistics plugin <= 14.16.14 - Cross Site Scripting (XSS) vulnerability
CVE-2026-97652
WS
WP Statistics – Simple, privacy-friendly Google Analytics alternative
veronalabs
6.1
0%
Oct 2WP Statistics <= 14.16.14 - Reflected Cross-Site Scripting via REQUEST_URI Query-Parameter Key
CVE-2026-93770
WS
WP Statistics
VeronaLabs
7.1
0%
Sep 30WordPress WP Statistics plugin <= 14.16.13 - Cross Site Scripting (XSS) vulnerability
CVE-2026-84774
WS
WP Statistics
VeronaLabs
6.1
0%
Sep 3WordPress WP Statistics plugin <= 14.16.11 - Cross Site Scripting (XSS) vulnerability
CVE-2026-15780
WS
WP Statistics – Simple, privacy-friendly Google Analytics alternative
veronalabs
7.2
1%
Aug 19WP Statistics <= 14.16.8 - Unauthenticated Stored Cross-Site Scripting via 'utm_campaign' Parameter
CVE-2026-54818
SA
Slimstat Analytics
VeronaLabs
8.5
0%
Jun 17WordPress Slimstat Analytics plugin <= 5.4.11 - SQL Injection vulnerability
CVE-2026-27410
SA
Slimstat Analytics
VeronaLabs
6.5
0%
Jun 17WordPress Slimstat Analytics plugin < 5.4.0 - Deserialization of untrusted data vulnerability
CVE-2026-40790
WS
WP SMS
VeronaLabs
6.5
0%
Jun 15WordPress WP SMS plugin <= 7.2.1 - Sensitive Data Exposure vulnerability
CVE-2026-48839
WS
WP Statistics
VeronaLabs
7.1
0%
Jun 1WordPress WP Statistics plugin <= 14.16.6 - Cross Site Scripting (XSS) vulnerability
CVE-2026-7634
SA
SlimStat Analytics
veronalabs
7.2
0%
May 28SlimStat Analytics <= 5.4.11 - Unauthenticated Stored Cross-Site Scripting via User-Agent Header
CVE-2026-3488
WS
WP Statistics – Simple, privacy-friendly Google Analytics alternative
veronalabs
6.5
0%
Apr 17WP Statistics <= 14.16.4 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure and Privacy Audit Manipulation
CVE-2026-5231
WS
WP Statistics – Simple, privacy-friendly Google Analytics alternative
veronalabs
7.2
0%
Apr 17WP Statistics <= 14.16.4 - Unauthenticated Stored Cross-Site Scripting via 'utm_source' Parameter
CVE-2026-1238
SA
SlimStat Analytics
veronalabs
7.2
0%
Mar 19SlimStat Analytics <= 5.3.5 - Unauthenticated Stored Cross-Site Scripting via 'fh'
CVE-2026-28136
WS
WP SMS
VeronaLabs
7.6
0%
Feb 26WordPress WP SMS plugin <= 6.9.12 - SQL Injection vulnerability
CVE-2025-69323
SA
Slimstat Analytics
VeronaLabs
7.1
0%
Feb 20WordPress Slimstat Analytics plugin <= 5.3.2 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2026-25343
WS
WP SMS
VeronaLabs
5.9
0%
Feb 19WordPress WP SMS plugin <= 7.1 - Cross Site Scripting (XSS) vulnerability
CVE-2025-13431
SA
SlimStat Analytics
veronalabs
6.5
0%
Feb 11SlimStat Analytics <= 5.3.1 - Authenticated (Subscriber+) SQL Injection via `args` Parameter
CVE-2025-15055
SA
SlimStat Analytics
veronalabs
7.2
0%
Jan 9SlimStat Analytics <= 5.3.4 - Unauthenticated Stored Cross-Site Scripting via 'notes/resource' Parameters
CVE-2025-15057
SA
SlimStat Analytics
veronalabs
7.2
0%
Jan 9SlimStat Analytics <= 5.3.3 - Unauthenticated Stored Cross-Site Scripting via 'fh' Parameter
CVE-2025-14151
SA
SlimStat Analytics
veronalabs
7.2
0%
Dec 19SlimStat Analytics <= 5.3.2 - Unauthenticated Stored Cross-Site Scripting
CVE-2025-62006
WS
WP SMS
VeronaLabs
5.4
0%
Oct 22WordPress WP SMS plugin <= 7.0.1 - Broken Access Control vulnerability
CVE-2025-9816
WS
WP Statistics – Simple, privacy-friendly Google Analytics alternative
veronalabs
7.2
10%
Sep 27WP Statistics <= 14.5.4 - Unauthenticated Stored Cross-Site Scripting via User-Agent Header
CVE-2025-55716
WS
WP Statistics
VeronaLabs
4.3
0%
Aug 14WordPress WP Statistics Plugin <= 14.15 - Broken Access Control Vulnerability
CVE-2025-3953
WS
WP Statistics – Simple, privacy-friendly Google Analytics alternative
veronalabs
5.4
0%
Apr 30WP Statistics – The Most Popular Privacy-Friendly Analytics Plugin <= 14.13.3 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Settings Update
CVE-2024-43331
WS
WP Sms
Veronalabs
9.8
0%
Aug 22Missing Authorization vulnerability in VeronaLabs WP SMS.This issue affects WP SMS: from n/a through 6.9.3
CVE-2024-34811
WS
WP Sms
Veronalabs
4.8
0%
May 14Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VeronaLabs WP SMS allows Stored XSS.This issue affects WP SMS: from n/a…
CVE-2024-30454
WS
WP Sms
Veronalabs
8.8
0%
Mar 29Cross-Site Request Forgery (CSRF) vulnerability in VeronaLabs WP SMS.This issue affects WP SMS: from n/a through 6.6.2
CVE-2024-25920
WS
WP Sms
Veronalabs
5.4
0%
Mar 27Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VeronaLabs WP SMS allows Stored XSS.This issue affects WP SMS: from n/a…
CVE-2024-24881
WS
WP Sms
Veronalabs
6.1
0%
Feb 8Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VeronaLabs WP SMS – Messaging & SMS Notification for WordPress, WooCommerce,…
CVE-2023-6981
WS
WP Sms
Veronalabs
4.9
0%
Jan 3The WP SMS – Messaging & SMS Notification for WordPress, WooCommerce, GravityForms, etc plugin for WordPress is vulnerable to SQL Injection via the 'group_id' parameter in all…
CVE-2023-6980
WS
WP Sms
Veronalabs
4.3
0%
Jan 3The WP SMS – Messaging & SMS Notification for WordPress, WooCommerce, GravityForms, etc plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and…
CVE-2023-27447
WS
WP Sms
Veronalabs
7.5
1%
Dec 28Exposure of Sensitive Information to an Unauthorized Actor vulnerability in VeronaLabs WP SMS – Messaging & SMS Notification for WordPress, WooCommerce, GravityForms, etc.This…
CVE-2023-32742
WS
WP Sms
Veronalabs
6.1
0%
Aug 30Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in VeronaLabs WP SMS plugin <= 6.1.4 versions
CVE-2023-0955
WS
WP Statistics
Veronalabs
8.8
1%
Mar 27The WP Statistics WordPress plugin before 14.0 does not escape a parameter, which could allow authenticated users to perform SQL Injection attacks
CVE-2022-38074
WS
WP Statistics
Veronalabs
8.8
1%
Mar 13SQL Injection vulnerability in VeronaLabs WP Statistics plugin <= 13.2.10 versions
CVE-2021-4333
WS
WP Statistics
Veronalabs
6.5
0%
Mar 7The WP Statistics plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 13.1.1
CVE-2022-4230
WS
WP Statistics
Veronalabs
8.8
36%
Jan 23The WP Statistics WordPress plugin before 13.2.9 does not escape a parameter, which could allow authenticated users to perform SQL Injection attacks
CVE-2022-27231
WS
WP Statistics
Veronalabs
6.1
1%
Jun 13Cross-site scripting vulnerability exists in WP Statistics versions prior to 13.2.0 because it improperly processes a platform parameter
CVE-2022-1005
WS
WP Statistics
Veronalabs
6.1
1%
Jun 8The WP Statistics WordPress plugin before 13.2.2 does not sanitise the REQUEST_URI parameter before outputting it back in the rendered page, leading to Cross-Site Scripting (XSS)…
CVE-2022-25307
WS
WP Statistics
Veronalabs
6.1
1%
Feb 24The WP Statistics WordPress plugin is vulnerable to Cross-Site Scripting due to insufficient escaping and sanitization of the platform parameter found in the…
CVE-2022-25306
WS
WP Statistics
Veronalabs
6.1
1%
Feb 24The WP Statistics WordPress plugin is vulnerable to Cross-Site Scripting due to insufficient escaping and sanitization of the browser parameter found in the…
CVE-2022-25305
WS
WP Statistics
Veronalabs
6.1
79%
Feb 24The WP Statistics WordPress plugin is vulnerable to Cross-Site Scripting due to insufficient escaping and sanitization of the IP parameter found in the…
CVE-2022-25149
WS
WP Statistics
Veronalabs
7.5
77%
Feb 24The WP Statistics WordPress plugin is vulnerable to SQL Injection due to insufficient escaping and parameterization of the IP parameter found in the…
CVE-2022-25148
WS
WP Statistics
Veronalabs
9.8
81%
Feb 24The WP Statistics WordPress plugin is vulnerable to SQL Injection due to insufficient escaping and parameterization of the current_page_id parameter found in the…
CVE-2022-0651
WS
WP Statistics
Veronalabs
7.5
32%
Feb 24The WP Statistics WordPress plugin is vulnerable to SQL Injection due to insufficient escaping and parameterization of the current_page_type parameter found in the…
CVE-2022-0513
WS
WP Statistics
Veronalabs
7.5
53%
Feb 16The WP Statistics WordPress plugin is vulnerable to SQL Injection due to insufficient escaping and parameterization of the exclusion_reason parameter found in the…
CVE-2021-24561
WS
WP Sms
Veronalabs
5.4
1%
Aug 23The WP SMS WordPress plugin before 5.4.13 does not sanitise the "wp_group_name" parameter before outputting it back in the "Groups" page, leading to an Authenticated Stored…
CVE-2021-24340
WS
WP Statistics
Veronalabs
7.5
30%
Jun 7The WP Statistics WordPress plugin before 13.0.8 relied on using the WordPress esc_sql() function on a field not delimited by quotes and did not first prepare the query
CVE-2017-18515
WS
WP Statistics
Veronalabs
9.8
3%
Aug 14The wp-statistics plugin before 12.0.8 for WordPress has SQL injection
CVE-2019-13275
WS
WP Statistics
Veronalabs
9.8
3%
Jul 4An issue was discovered in the VeronaLabs wp-statistics plugin before 12.6.7 for WordPress
CVE-2019-12566
WS
WP Statistics
Veronalabs
5.4
1%
Jun 3The WP Statistics plugin through 12.6.5 for Wordpress has stored XSS in includes/class-wp-statistics-pages.php
CVE-2019-10864
WS
WP Statistics
Veronalabs
6.1
1%
Apr 23The WP Statistics plugin through 12.6.2 for WordPress has XSS, allowing a remote attacker to inject arbitrary web script or HTML via the Referer header of a GET request
CVE-2018-1000556
WS
WP Statistics
Veronalabs
6.1
1%
Jun 26WordPress version 4.8 + contains a Cross Site Scripting (XSS) vulnerability in plugins.php or core wordpress on delete function that can result in An attacker can perform client…