StatCounter
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| StatCounter – Free Real Time Visitor Stats | 2 | – | May 29, 2026 |
| StatCounter | 1 | – | Jun 26, 2026 |
Exploited and recent CVEs
- CVE-2026-57629 WordPress StatCounter plugin <= 2.1.1 - Cross Site Scripting (XSS) vulnerability 0.2%
- CVE-2026-6275 StatCounter <= 2.1.1 - Authenticated (Author+) Stored Cross-Site Scripting via Author Nickname 0.3%
- CVE-2025-13048 Official StatCounter Plugin <= 2.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Nickname 0.3%