Medium · 6.5 CVE-2026-57629 EUVD-2026-39745GHSA-xm6v-vxpj-38gq

WordPress StatCounter plugin <= 2.1.1 - Cross Site Scripting (XSS) vulnerability

Published Jun 26, 2026 · Updated Jun 29, 2026 · Assigned by Patchstack

Vendor: StatCounter Product: StatCounter

Description

Contributor Cross Site Scripting (XSS) in StatCounter <= 2.1.1 versions.

Affected products

Vendor	Product	Affected	Fixed
StatCounter	StatCounter	≤ 2.1.1	—

References

https://patchstack.com/database/wordpress/plugin/official-statcounter-plugin-for-wordpress/vulnerability/wordpress-statcounter-plugin-2-1-1-cross-site-scripting-xss-vulnerability?_s_id=cve vdb-entry