Plugin icon

WP Visitor Statistics (Real Time Traffic)

wp-stats-manager

Vulnerabilities:

14

Last Updated:

June 6, 2026

Active Installs:

20000

Published
Title
Fixed in
CVSS
Published
2026-04-07
Title
WP Visitor Statistics (Real Time Traffic) < 8.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'height' Shortcode Attribute
Fixed in
Fixed in 8.5
CVSS
5.5 (medium)
Published
2025-12-15
Title
Visitor Statistics (Real Time Traffic) < 8.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 8.4
CVSS
6.4 (medium)
Published
2025-08-20
Title
WP Visitor Statistics (Real Time Traffic) < 8.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 8.3
CVSS
6.4 (medium)
Published
2025-07-03
Title
WP Visitor Statistics (Real Time Traffic) < 7.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 7.9
CVSS
6.4 (medium)
Published
2025-06-19
Title
WP Visitor Statistics (Real Time Traffic) <= 8.4 - Missing Authorization
Fixed in
No known fix
CVSS
5.3 (medium)
Published
2025-01-24
Title
WP Visitor Statistics (Real Time Traffic) < 7.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 7.3
CVSS
6.4 (medium)
Published
2025-01-06
Title
WP Visitor Statistics (Real Time Traffic) < 7.6 - Missing Authorization
Fixed in
Fixed in 7.6
CVSS
4.3 (medium)
Published
2024-02-02
Title
WP Visitor Statistics (Real Time Traffic) < 6.9.5 - Sensitive Information Exposure via Log File
Fixed in
Fixed in 6.9.5
CVSS
5.3 (medium)
Published
2023-04-24
Title
WP Visitor Statistics (Real Time Traffic) < 6.9 - Unauthenticated SQLi
Fixed in
Fixed in 6.9
CVSS
8.6 (high)
Published
2023-01-17
Title
WP Visitor Statistics (Real Time Traffic) < 6.5 - Contributor+ Stored XSS via Shortcode
Fixed in
Fixed in 6.5
CVSS
6.8 (medium)
Published
2022-07-05
Title
WP Visitor Statistics (Real Time Traffic) < 5.8 - Unauthenticated SQLi
Fixed in
Fixed in 5.8
CVSS
8.6 (high)
Published
2022-02-14
Title
WP Visitor Statistics (Real Time Traffic) < 5.6 - Subscriber+ SQL Injection
Fixed in
Fixed in 5.6
CVSS
7.7 (high)
Published
2022-01-31
Title
WP Visitor Statistics (Real Time Traffic) < 5.5 - Arbitrary IP Address Exclusion to Stored XSS
Fixed in
Fixed in 5.5
CVSS
8.0 (high)
Published
2021-11-22
Title
WP Visitor Statistics (Real Time Traffic) < 4.8 - Subscriber+ SQL Injection
Fixed in
Fixed in 4.8
CVSS
7.7 (high)