VeronaLabs WP Statistics

• CVE-2026-97276 High 7.1 WordPress WP Statistics plugin <= 14.16.14 - Cross Site Scripting (XSS) vulnerability 0.1%
• CVE-2026-93770 High 7.1 WordPress WP Statistics plugin <= 14.16.13 - Cross Site Scripting (XSS) vulnerability 0.2%
• CVE-2026-84774 Medium 6.1 WordPress WP Statistics plugin <= 14.16.11 - Cross Site Scripting (XSS) vulnerability 0.3%
• CVE-2026-48839 High 7.1 WordPress WP Statistics plugin <= 14.16.6 - Cross Site Scripting (XSS) vulnerability 0.2%
• CVE-2025-55716 Medium 4.3 WordPress WP Statistics Plugin <= 14.15 - Broken Access Control Vulnerability 0.2%
• CVE-2022-38074 Critical 9.9 WordPress WP Statistics Plugin <= 13.2.10 is vulnerable to SQL Injection 0.7%
• CVE-2022-27231 Unrated Cross-site scripting vulnerability exists in WP Statistics versions prior to 13.2.0 because it improperly processes a platform parameter. By exploiting this vulnerability, an arbitrary script may be e 1.1%
• CVE-2022-0513 Critical 9.8 WP Statistics <= 13.1.4 Unauthenticated Blind SQL Injection via exclusion_reason 53.5%
• CVE-2021-24340 Unrated WP Statistics < 13.0.8 - Unauthenticated SQL Injection 29.8%