Skip to content
OpenAdvisories

Vendor

osamaesh

7 known vulnerabilities.

Products

WP Visitor Statistics (Real Time Traffic) 6 WP Visitor Statistics (WordPress plugin) 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-116609

    WP Visitor Statistics (Real Time Traffic) <= 8.8 - Authenticated (Contributor+) SQL Injection via 'from' Shortcode Attribute

    The WP Visitor Statistics (Real Time Traffic) plugin for WordPress is vulnerable to SQL Injection via the 'from' (and sibling 'to'/'first'/'second') shortcode attribute of the [wsm_showTrafficStatsList] shortcode in versions up to, and including, 8.8 This is …

    osamaesh WP Visitor Statistics (Real Time Traffic) Web / CMS
  • Medium 6.4
    CVE-2026-4303

    WP Visitor Statistics (Real Time Traffic) <= 8.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'height' Shortcode Attribute

    The WP Visitor Statistics (Real Time Traffic) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wsm_showDayStatsGraph' shortcode in all versions up to, and including, 8.4 due to insufficient input sanitization and output esca…

    osamaesh WP Visitor Statistics (Real Time Traffic) Web / CMS
  • Medium 5.3
    CVE-2024-24867

    WordPress WP Stats Manager plugin <= 6.9.4 - Sensitive Data Exposure vulnerability

    Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Osamaesh WP Visitor Statistics (Real Time Traffic).This issue affects WP Visitor Statistics (Real Time Traffic): from n/a through 6.9.4.

    osamaesh WP Visitor Statistics (Real Time Traffic)