Log in Start free

Osamaesh

Products

ProductCVEsExploitedLatest
WP Visitor Statistics (Real Time Traffic)6–Nov 7, 2026
WP Visitor Statistics (WordPress plugin)1–Jul 25, 2022

Exploited and recent CVEs

  • CVE-2026-111370 High 7.2 WP Visitor Statistics (Real Time Traffic) <= 8.9.0 - Unauthenticated Stored Cross-Site Scripting via 'os' / 'browser' / 'res' Tracker Parameters –
  • CVE-2026-109230 High 7.2 WP Visitor Statistics (Real Time Traffic) <= 8.7.1 - Unauthenticated Stored Cross-Site Scripting via 'browser' Parameter –
  • CVE-2026-116609 Medium 6.5 WP Visitor Statistics (Real Time Traffic) <= 8.8 - Authenticated (Contributor+) SQL Injection via 'from' Shortcode Attribute 0.3%
  • CVE-2026-96267 High 7.5 WP Visitor Statistics (Real Time Traffic) <= 8.7 - Unauthenticated SQL Injection via 'fullRef' Parameter 0.3%
  • CVE-2026-4303 Medium 6.4 WP Visitor Statistics (Real Time Traffic) <= 8.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'height' Shortcode Attribute 0.3%
  • CVE-2024-24867 Medium 5.3 WordPress WP Stats Manager plugin <= 6.9.4 - Sensitive Data Exposure vulnerability 0.5%
  • CVE-2022-33965 Critical 9.3 WordPress WP Visitor Statistics plugin <= 5.7 - Multiple Unauthenticated SQL Injection (SQLi) vulnerabilities 4.4%