Unknown NewStatPress

• CVE-2026-14845 Medium 6.1 NewStatPress < 1.4.5 - Unauthenticated Stored XSS via Top Post Widget 0.3%
• CVE-2022-0206 Unrated NewStatPress < 1.3.6 - Reflected Cross-Site Scripting 1.4%