WordPress Plugin Vulnerabilities | Page 174 | WPScan

0-9
a
b
c
d
e
f
g
h
i
j
k
l
m
n
o
p
q
r
s
t
u
v
w
x
y
z

Slug

Published

2019-07-01

Title

WP Statistics < 12.6.7 - Unauthenticated Blind SQL Injection

Slug

Published

2019-07-03

Title

WP Statistics < 12.6.7 - Unauthenticated Stored XSS Under Certain Configurations

Slug

Published

2021-05-19

Title

WP Statistics < 13.0.8 - Unauthenticated SQL Injection

Slug

Published

2021-08-30

Title

WP Statistic < 13.1 - Reflected Cross-Site Scripting (XSS)

Slug

Published

2022-02-10

Title

WP Statistics < 13.1.5 - Unauthenticated Blind SQL Injection

Slug

Published

2022-02-16

Title

WP Statistics < 13.1.6 - Unauthenticated Blind SQL Injection via IP

Slug

Published

2022-02-16

Title

WP Statistics < 13.1.6 - Unauthenticated Blind SQL Injection via current_page_id

Slug

Published

2022-02-16

Title

WP Statistics < 13.1.6 - Unauthenticated Blind SQL Injection via current_page_type

Slug

Published

2022-02-17

Title

WP Statistics < 13.1.6 - Multiple Unauthenticated Stored Cross-Site Scripting

Slug

Published

2022-05-10

Title

WP Statistics < 13.2.2 - Reflected Cross-Site Scripting

Slug

Published

2022-05-24

Title

WP Statistic < 13.2.2 - Admin+ Stored Cross-Site Scripting

Slug

Published

2022-02-16

Title

WP Statistic < 13.1.6 - Reflected Cross-Site Scripting

Slug

Published

2022-12-27

Title

WP Statistics < 13.2.9 - Authenticated SQLi

Slug

Published

2021-09-11

Title

WP Statistics < 13.1.2 - Arbitrary Plugin Activation/Deactivation via CSRF

Slug

Published

2023-01-31

Title

WP Statistics < 13.2.11 - Subscriber+ SQLi

Slug

Published

2023-03-06

Title

WP Statistics < 14.0 - Authenticated SQLi

Slug

Published

2024-03-11

Title

WP Statistics < 14.5.1 - Unauthenticated Stored Cross-Site Scripting

Slug

Published

2025-04-29

Title

WP Statistics – The Most Popular Privacy-Friendly Analytics Plugin < 14.13.4 - Subscriber+ Arbitrary Plugin Settings Update

Slug

Published

2025-08-14

Title

WP Statistics < 14.15.2 - Missing Authorization

Slug

Published

2025-09-26

Title

WP Statistics < 14.15.5 - Unauthenticated Stored XSS via User-Agent Header

Slug

Published

2015-06-17

Title

WP-Stats < 2.52 - CSRF to Stored Cross-Site Scripting (XSS)

Slug

wp-stats-dashboard

Published

2015-11-24

Title

WP-Stats-Dashboard <= 2.9.4 - Authenticated Blind SQL Injection

Slug

wp-stats-manager

Published

2021-11-22

Title

WP Visitor Statistics (Real Time Traffic) < 4.8 - Subscriber+ SQL Injection

Slug

wp-stats-manager

Published

2022-01-31

Title

WP Visitor Statistics (Real Time Traffic) < 5.5 - Arbitrary IP Address Exclusion to Stored XSS

Slug

wp-stats-manager

Published

2022-02-14

Title

WP Visitor Statistics (Real Time Traffic) < 5.6 - Subscriber+ SQL Injection