ice00

Products

ProductCVEsExploitedLatest
NewStatPress3–Oct 14, 2026

Exploited and recent CVEs

  • CVE-2026-101924 High 7.2 NewStatPress <= 1.4.5 - Unauthenticated Stored Cross-Site Scripting via 'urlrequested' Attribute via Query String 0.3%
  • CVE-2026-100153 High 7.2 NewStatPress <= 1.4.5 - Unauthenticated Stored Cross-Site Scripting via URL Request Tracking (urlrequested field) 0.3%
  • CVE-2025-13747 Medium 6.4 NewStatPress <= 1.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.2%