Vendor

VeronaLabs

44 known vulnerabilities.

Products

Slimstat Analytics 14 WP Statistics 9 WP SMS 9 WP Statistics – Simple, privacy-friendly Google Analytics alternative 8 WSMS (formerly WP SMS) – SMS & MMS Notifications with OTP and 2FA for WooCommerce 2 WP SMS – Messaging & SMS Notification for WordPress, WooCommerce, GravityForms, etc 2

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

High 7.2

CVE-2025-9816 Public exploit EPSS 12%

WP Statistics <= 14.5.4 - Unauthenticated Stored Cross-Site Scripting via User-Agent Header

The WP Statistics – The Most Popular Privacy-Friendly Analytics Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the User-Agent Header in all versions up to, and including, 14.5.4 due to insufficient input sanitization and output e…

VeronaLabs WP Statistics – Simple, privacy-friendly Google Analytics alternative Web / CMS

Sep 27, 2025