High · 7.1 CVE-2026-28175 EUVD-2026-57958GHSA-cxmp-fp83-fp77

WordPress Visitors Traffic Real Time Statistics plugin <= 8.11 - Cross Site Scripting (XSS) vulnerability

Published Aug 13, 2026 · Updated Aug 13, 2026 · Assigned by Patchstack

Vendor: wp-buy Product: Visitors Traffic Real Time Statistics

Description

Unauthenticated Cross Site Scripting (XSS) in Visitors Traffic Real Time Statistics <= 8.11 versions.

Affected products

Vendor	Product	Affected	Fixed
wp-buy	Visitors Traffic Real Time Statistics	≤ 8.11	—

References

https://patchstack.com/database/wordpress/plugin/visitors-traffic-real-time-statistics/vulnerability/wordpress-visitors-traffic-real-time-statistics-plugin-8-11-cross-site-scripting-xss-vulnerability?_s_id=cve vdb-entry