WP Statistics — Vulnerabilities & Security Advisories 17

All 17 CVE vulnerabilities found in WP Statistics, with AI-generated Chinese analysis, references, and POCs.

Vendor: WP Statistics

CVE ID	Title	CVSS	Severity	Paused
CVE-2025-55716	WordPress WP Statistics Plugin <= 14.15 - Broken Access Control Vulnerability CWE-862	4.3	Medium	2025-08-14
CVE-2023-0955	WP Statistics < 14.0 - Authenticated SQLi	8.8	-	2023-03-27
CVE-2022-38074	WordPress WP Statistics Plugin <= 13.2.10 is vulnerable to SQL Injection CWE-89	9.9	Critical	2023-03-13
CVE-2022-4230	WP Statistics < 13.2.9 - Authenticated SQLi	8.8	-	2023-01-23
CVE-2022-27231	WordPress plugin WP Statistics 跨站脚本漏洞	6.1	-	2022-06-13
CVE-2022-1005	WP Statistics < 13.2.2 - Reflected Cross-Site Scripting CWE-79	6.1	-	2022-06-06
CVE-2022-25307	WP Statistics <= 13.1.5 Unauthenticated Stored Cross-Site Scripting via platform CWE-79	7.2	High	2022-02-24
CVE-2022-25305	WP Statistics <= 13.1.5 Unauthenticated Stored Cross-Site Scripting via IP CWE-79	7.2	High	2022-02-24
CVE-2022-25306	WP Statistics <= 13.1.5 Unauthenticated Stored Cross-Site Scripting via browser CWE-79	7.2	High	2022-02-24
CVE-2022-25149	WP Statistics <= 13.1.5 Unauthenticated Blind SQL Injection via IP CWE-89	9.8	Critical	2022-02-24
CVE-2022-0651	WP Statistics <= 13.1.5 Unauthenticated Blind SQL Injection via current_page_type CWE-89	9.8	Critical	2022-02-24
CVE-2022-25148	WP Statistics <= 13.1.5 Unauthenticated Blind SQL Injection via current_page_id CWE-89	9.8	Critical	2022-02-24
CVE-2022-0513	WP Statistics <= 13.1.4 Unauthenticated Blind SQL Injection via exclusion_reason CWE-89	9.8	Critical	2022-02-16
CVE-2021-24340	WP Statistics < 13.0.8 - Unauthenticated SQL Injection CWE-89	7.5	-	2021-06-07
CVE-2017-2135	WordPress WP Statistics 跨站脚本漏洞	6.1	-	2017-04-28
CVE-2017-2147	WordPress WP Statistics 跨站脚本漏洞	6.1	-	2017-04-28
CVE-2017-2136	WordPress WP Statistics 跨站脚本漏洞	6.1	-	2017-04-28

All 17 known CVE vulnerabilities affecting WP Statistics with full Chinese analysis, references, and POCs where available.