Known vulnerabilities in the WP Statistics plugin
33 security advisories have been published for the WP Statistics plugin. Each entry below states what an attacker can do, what privilege they need, and the version the issue was fixed in.
- Wp Statistics - Security Vulnerability (CVE-2026-97276) HIGH
- Wp Statistics - Security Vulnerability (CVE-2026-97652) MEDIUM
- Wp Statistics - Security Vulnerability (CVE-2026-93770) HIGH
- WP Statistics - Cross-Site Scripting (XSS) (CVE-2026-84774) MEDIUM
- Wp Statistics - Cross-Site Scripting (XSS) (CVE-2026-15780) HIGH
- WP Statistics - Broken Access Control (CVE-2026-16562) MEDIUM
- Wp Statistics - Cross-Site Scripting (XSS) (CVE-2026-48839) HIGH
- Wp Statistics - Cross-Site Scripting (XSS) (CVE-2026-5231) HIGH
- Wp Statistics - Broken Access Control (CVE-2026-3488) MEDIUM
- Wp Statistics - Cross-Site Scripting (XSS) (CVE-2025-9816) HIGH
- Wp Statistics - Broken Access Control (CVE-2025-55716) MEDIUM
- Wp Statistics - Broken Access Control (CVE-2025-3953) MEDIUM
- WP Statistics - Cross-Site Scripting (XSS) (CVE-2024-2194) HIGH
- Wp Statistics - SQL Injection (CVE-2023-0955) HIGH
- Wp Statistics - SQL Injection (CVE-2022-38074) HIGH
- Wp Statistics - Cross-Site Request Forgery (CSRF) (CVE-2021-4333) MEDIUM
- Wp Statistics - SQL Injection (CVE-2022-4230) HIGH
- Wp Statistics - Cross-Site Scripting (XSS) (CVE-2022-27231) MEDIUM
- Wp Statistics - Cross-Site Scripting (XSS) (CVE-2022-1005) MEDIUM
- Wp Statistics - SQL Injection (CVE-2022-25149) CRITICAL
- Wp Statistics - SQL Injection (CVE-2022-25148) CRITICAL
- Wp Statistics - Cross-Site Scripting (XSS) (CVE-2022-25307) HIGH
- Wp Statistics - Cross-Site Scripting (XSS) (CVE-2022-25306) HIGH
- Wp Statistics - Cross-Site Scripting (XSS) (CVE-2022-25305) HIGH
- Wp Statistics - SQL Injection (CVE-2022-0651) CRITICAL
- Wp Statistics - SQL Injection (CVE-2022-0513) CRITICAL
- Wp Statistics - Security Vulnerability (CVE-2021-24340) HIGH
- Wp Statistics - SQL Injection (CVE-2017-18515) CRITICAL
- Wp Statistics - SQL Injection (CVE-2019-13275) CRITICAL
- Wp Statistics - Cross-Site Scripting (XSS) (CVE-2019-12566) MEDIUM