VendorsWP Slimstatslimstat_analyticsany version
Vulnerabilities

WP Slimstat Slimstat Analytics any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

11CVEs
CVE-2022-45373
WordPress Slimstat Analytics Plugin <= 5.0.4 is vulnerable to SQL Injection
Published 2023-11-06 · Modified
9.8EPSS 0.005
CVE-2023-0630
Slimstat Analytics < 4.9.3.3 - Subscriber+ SQL Injection
Published 2023-03-20 · Modified
8.8EPSS 0.051
CVE-2023-4598
Slimstat Analytics <= 5.0.9 - Authenticated (Contributor+) Blind SQL Injection via Shortcode
Published 2023-10-20 · Modified
8.8EPSS 0.011
CVE-2024-9548
Slimstat Analytics <= 5.2.6 - Unauthenticated Stored Cross-Site Scripting
Published 2024-10-14 · Analyzed
7.2EPSS 0.005
CVE-2022-45366
WordPress Slimstat Analytics Plugin <= 5.0.4 is vulnerable to Cross Site Scripting (XSS)
Published 2023-05-25 · Modified
7.1EPSS 0.004
CVE-2023-4597
Slimstat Analytics <= 5.0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Published 2023-08-30 · Modified
6.4EPSS 0.007
CVE-2024-1073
SlimStat Analytics <= 5.1.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Published 2024-02-02 · Modified
6.4EPSS 0.004
CVE-2015-9273
The wp-slimstat (aka Slimstat Analytics) plugin before 4.1.6.1 for WordPress has XSS via an HTTP Referer header, or via a field associated with JavaScript-based Referer tracking.
Published 2018-10-07 · Modified
6.1EPSS 0.013
CVE-2019-15112
The wp-slimstat plugin before 4.8.1 for WordPress has XSS.
Published 2019-08-21 · Modified
6.1EPSS 0.010
CVE-2022-4310
Slimstat Analytics < 4.9.3 - Unauthenticated Stored XSS
Published 2023-01-09 · Modified
6.1EPSS 0.006
CVE-2023-40676
WordPress Slimstat Analytics Plugin <= 5.0.8 is vulnerable to Cross Site Scripting (XSS)
Published 2023-09-27 · Modified
5.9EPSS 0.004