Osamaesh WP Visitor Statistics (Real Time Traffic)

• CVE-2026-111370 High 7.2 WP Visitor Statistics (Real Time Traffic) <= 8.9.0 - Unauthenticated Stored Cross-Site Scripting via 'os' / 'browser' / 'res' Tracker Parameters –
• CVE-2026-109230 High 7.2 WP Visitor Statistics (Real Time Traffic) <= 8.7.1 - Unauthenticated Stored Cross-Site Scripting via 'browser' Parameter –
• CVE-2026-116609 Medium 6.5 WP Visitor Statistics (Real Time Traffic) <= 8.8 - Authenticated (Contributor+) SQL Injection via 'from' Shortcode Attribute 0.3%
• CVE-2026-96267 High 7.5 WP Visitor Statistics (Real Time Traffic) <= 8.7 - Unauthenticated SQL Injection via 'fullRef' Parameter 0.3%
• CVE-2026-4303 Medium 6.4 WP Visitor Statistics (Real Time Traffic) <= 8.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'height' Shortcode Attribute 0.3%
• CVE-2024-24867 Medium 5.3 WordPress WP Stats Manager plugin <= 6.9.4 - Sensitive Data Exposure vulnerability 0.5%