Skip to content
OpenAdvisories

Vendor

VeronaLabs

44 known vulnerabilities.

Products

Slimstat Analytics 14 WP Statistics 9 WP SMS 9 WP Statistics – Simple, privacy-friendly Google Analytics alternative 8 WSMS (formerly WP SMS) – SMS & MMS Notifications with OTP and 2FA for WooCommerce 2 WP SMS – Messaging & SMS Notification for WordPress, WooCommerce, GravityForms, etc 2
All Critical High Medium Low Exploited only Public exploit

44 results · Feed

  • Medium 6.5
    CVE-2021-4333

    WP Statistics <= 13.1.1 - Cross-Site Request Forgery to Arbitrary Plugin Activation and Deactivation

    The WP Statistics plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 13.1.1. This is due to missing or incorrect nonce validation on the view() function. This makes it possible for unauthenticated attackers to a…

    VeronaLabs WP Statistics – Simple, privacy-friendly Google Analytics alternative Web / CMS
  • Unscored —
    CVE-2022-27231

    Cross-site scripting vulnerability exists in WP Statistics versions prior to 13.2.0 because it improperly processes a p…

    VeronaLabs WP Statistics
  • Critical 9.8
    CVE-2022-0513 EPSS 53%

    WP Statistics <= 13.1.4 Unauthenticated Blind SQL Injection via exclusion_reason

    The WP Statistics WordPress plugin is vulnerable to SQL Injection due to insufficient escaping and parameterization of the exclusion_reason parameter found in the ~/includes/class-wp-statistics-exclusion.php file which allows attackers without authentication …

    VeronaLabs WP Statistics Web / CMS
  • Unscored —
    CVE-2021-24340 Scanner template EPSS 30%

    WP Statistics < 13.0.8 - Unauthenticated SQL Injection

    The WP Statistics WordPress plugin before 13.0.8 relied on using the WordPress esc_sql() function on a field not delimited by quotes and did not first prepare the query. Additionally, the page, which should have been accessible to administrator only, was also…

    VeronaLabs WP Statistics Web / CMS