Skip to content
OpenAdvisories

Vendor

gamerz

10 known vulnerabilities.

Products

WP-DownloadManager 5 WP-UserOnline 2 WP-Polls 1 WP-Stats 1 WP-PostRatings 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.2
    CVE-2026-19794 Public exploit

    WP-Stats <= 2.56 - Unauthenticated Stored Cross-Site Scripting

    The WP-Stats plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 2.56 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web …

    gamerz WP-Stats Web / CMS