VeronaLabs WP Statistics – Simple, privacy-friendly Google Analytics alternative

• CVE-2026-97652 Medium 6.1 WP Statistics <= 14.16.14 - Reflected Cross-Site Scripting via REQUEST_URI Query-Parameter Key 0.3%
• CVE-2026-15780 High 7.2 WP Statistics <= 14.16.8 - Unauthenticated Stored Cross-Site Scripting via 'utm_campaign' Parameter 0.6%
• CVE-2026-3488 Medium 6.5 WP Statistics <= 14.16.4 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure and Privacy Audit Manipulation 0.3%
• CVE-2026-5231 High 7.2 WP Statistics <= 14.16.4 - Unauthenticated Stored Cross-Site Scripting via 'utm_source' Parameter 0.5%
• CVE-2025-9816 High 7.2 WP Statistics <= 14.5.4 - Unauthenticated Stored Cross-Site Scripting via User-Agent Header 12.1%
• CVE-2025-3953 Medium 5.4 WP Statistics – The Most Popular Privacy-Friendly Analytics Plugin <= 14.13.3 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Settings Update 0.3%
• CVE-2024-2194 High 7.2 WP Statistics <= 14.5 - Unauthenticated Stored Cross-Site Scripting 63.2%
• CVE-2021-4333 Medium 6.5 WP Statistics <= 13.1.1 - Cross-Site Request Forgery to Arbitrary Plugin Activation and Deactivation 0.4%