Skip to content
OpenAdvisories

Vendor

VeronaLabs

44 known vulnerabilities.

Products

Slimstat Analytics 14 WP Statistics 9 WP SMS 9 WP Statistics – Simple, privacy-friendly Google Analytics alternative 8 WSMS (formerly WP SMS) – SMS & MMS Notifications with OTP and 2FA for WooCommerce 2 WP SMS – Messaging & SMS Notification for WordPress, WooCommerce, GravityForms, etc 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.9
    CVE-2022-38074

    WordPress WP Statistics Plugin <= 13.2.10 is vulnerable to SQL Injection

    SQL Injection vulnerability in VeronaLabs WP Statistics plugin <= 13.2.10 versions.

    VeronaLabs WP Statistics
  • Critical 9.8
    CVE-2022-0513 EPSS 53%

    WP Statistics <= 13.1.4 Unauthenticated Blind SQL Injection via exclusion_reason

    The WP Statistics WordPress plugin is vulnerable to SQL Injection due to insufficient escaping and parameterization of the exclusion_reason parameter found in the ~/includes/class-wp-statistics-exclusion.php file which allows attackers without authentication …

    VeronaLabs WP Statistics Web / CMS