VeronaLabs SlimStat Analytics

• CVE-2026-54818 High 8.5 WordPress Slimstat Analytics plugin <= 5.4.11 - SQL Injection vulnerability 0.3%
• CVE-2026-27410 Medium 6.5 WordPress Slimstat Analytics plugin < 5.4.0 - Deserialization of untrusted data vulnerability 0.3%
• CVE-2026-7634 High 7.2 SlimStat Analytics <= 5.4.11 - Unauthenticated Stored Cross-Site Scripting via User-Agent Header 0.4%
• CVE-2026-1238 High 7.2 SlimStat Analytics <= 5.3.5 - Unauthenticated Stored Cross-Site Scripting via 'fh' 0.3%
• CVE-2025-69323 High 7.1 WordPress Slimstat Analytics plugin <= 5.3.2 - Reflected Cross Site Scripting (XSS) vulnerability 0.2%
• CVE-2025-13431 Medium 6.5 SlimStat Analytics <= 5.3.1 - Authenticated (Subscriber+) SQL Injection via `args` Parameter 0.3%
• CVE-2025-15055 High 7.2 SlimStat Analytics <= 5.3.4 - Unauthenticated Stored Cross-Site Scripting via 'notes/resource' Parameters 0.3%
• CVE-2025-15057 High 7.2 SlimStat Analytics <= 5.3.3 - Unauthenticated Stored Cross-Site Scripting via 'fh' Parameter 0.3%
• CVE-2025-14151 High 7.2 SlimStat Analytics <= 5.3.2 - Unauthenticated Stored Cross-Site Scripting 0.4%
• CVE-2023-33994 Medium 6.5 WordPress Slimstat Analytics plugin <= 5.0.5.1 - Broken Access Control vulnerability 0.6%
• CVE-2024-9548 High 7.2 Slimstat Analytics <= 5.2.6 - Unauthenticated Stored Cross-Site Scripting 0.5%
• CVE-2024-1073 Medium 6.4 SlimStat Analytics <= 5.1.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting 0.4%
• CVE-2023-4598 High 8.8 Slimstat Analytics <= 5.0.9 - Authenticated (Contributor+) Blind SQL Injection via Shortcode 1.1%
• CVE-2023-4597 Medium 6.4 Slimstat Analytics <= 5.0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode 0.7%