Osamaesh
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| WP Visitor Statistics (Real Time Traffic) | 4 | – | Oct 28, 2026 |
| WP Visitor Statistics (WordPress plugin) | 1 | – | Jul 25, 2022 |
Exploited and recent CVEs
- CVE-2026-116609 WP Visitor Statistics (Real Time Traffic) <= 8.8 - Authenticated (Contributor+) SQL Injection via 'from' Shortcode Attribute 0.3%
- CVE-2026-96267 WP Visitor Statistics (Real Time Traffic) <= 8.7 - Unauthenticated SQL Injection via 'fullRef' Parameter 0.3%
- CVE-2026-4303 WP Visitor Statistics (Real Time Traffic) <= 8.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'height' Shortcode Attribute 0.3%
- CVE-2024-24867 WordPress WP Stats Manager plugin <= 6.9.4 - Sensitive Data Exposure vulnerability 0.5%
- CVE-2022-33965 WordPress WP Visitor Statistics plugin <= 5.7 - Multiple Unauthenticated SQL Injection (SQLi) vulnerabilities 4.4%