Plugin icon

NewStatPress

newstatpress
Plugin closed

Vulnerabilities:

11

Last Updated:

July 7, 2026

Active Installs:

8000

Published
Title
Fixed in
CVSS
Published
2026-10-13
Title
NewStatPress <= 1.4.5 - Unauthenticated Stored Cross-Site Scripting via 'urlrequested' Attribute via Query String
Fixed in
No known fix
CVSS
7.2 (high)
Published
2026-10-13
Title
NewStatPress <= 1.4.5 - Unauthenticated Stored Cross-Site Scripting via URL Request Tracking (urlrequested field)
Fixed in
No known fix
CVSS
7.2 (high)
Published
2026-07-13
Title
NewStatPress < 1.4.5 - Unauthenticated Stored XSS via Top Post Widget
Fixed in
Fixed in 1.4.5
CVSS
4.2 (medium)
Published
2025-12-11
Title
NewStatPress < 1.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 1.4.4
CVSS
6.4 (medium)
Published
2022-01-13
Title
NewStatPress < 1.3.6 - Reflected Cross-Site Scripting
Fixed in
Fixed in 1.3.6
CVSS
6.1 (medium)
Published
2017-03-01
Title
NewStatPress <= 1.2.4 - Stored Cross-Site Scripting (XSS)
Fixed in
Fixed in 1.2.5
CVSS
6.1 (medium)
Published
2015-07-07
Title
NewStatPress < 1.0.6 - SQL Injection
Fixed in
Fixed in 1.0.6
CVSS
9.8 (critical)
Published
2015-07-07
Title
NewStatPress < 1.0.6 - Reflected Cross-Site Scripting (XSS)
Fixed in
Fixed in 1.0.6
CVSS
6.1 (medium)
Published
2015-06-30
Title
NewStatPress <= 1.0.3 - Unauthenticated Stored Cross-Site Scripting (XSS)
Fixed in
Fixed in 1.0.4
CVSS
6.1 (medium)
Published
2015-06-08
Title
Newstatpress < 1.0.1 - SQL Injection
Fixed in
Fixed in 1.0.1
CVSS
9.8 (critical)
Published
2015-05-25
Title
NewStatPress 0.9.8 - XSS & SQL Injection
Fixed in
Fixed in 0.9.9
CVSS
n/a