Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

WP Statistics — Vulnerabilities & Security Advisories 21

All 21 CVE vulnerabilities found in WP Statistics, with AI-generated Chinese analysis, references, and POCs.

This page aggregates known security vulnerabilities affecting the product WP Statistics, classified under the relevant weakness type and tagged for easy identification. It collects various classes of security flaws reported against this plugin, covering advisories published within the recent monitoring period. Here, you can track the vendor’s security updates, understand the specific weakness classes affecting the product, and review its complete vulnerability history. The data is structured to support security research, patch management, and risk assessment for systems relying on WP Statistics.

Vendor: WP Statistics

CVE ID Title CVSS Severity Published
CVE-2026-93770 WordPress WP Statistics plugin <= 14.16.13 - Cross Site Scripting (XSS) vulnerability CWE-79 7.1 High 2026-09-30
CVE-2026-84774 WordPress WP Statistics plugin <= 14.16.11 - Cross Site Scripting (XSS) vulnerability CWE-79 6.1 Medium 2026-09-03
CVE-2026-16562 WP Statistics < 14.16.10 - Subscriber+ Sensitive Data Disclosure via Metabox AJAX Handlers - - 2026-08-08
CVE-2026-48839 WordPress WP Statistics plugin <= 14.16.6 - Cross Site Scripting (XSS) vulnerability CWE-79 7.1 High 2026-06-01
CVE-2025-55716 WordPress WP Statistics Plugin <= 14.15 - Broken Access Control Vulnerability CWE-862 4.3 Medium 2025-08-14
CVE-2023-0955 WP Statistics < 14.0 - Authenticated SQLi 8.8 - 2023-03-27
CVE-2022-38074 WordPress WP Statistics Plugin <= 13.2.10 is vulnerable to SQL Injection CWE-89 9.9 High 2023-03-13
CVE-2022-4230 WP Statistics < 13.2.9 - Authenticated SQLi 8.8 - 2023-01-23
CVE-2022-27231 WordPress plugin WP Statistics 跨站脚本漏洞 6.1 - 2022-06-13
CVE-2022-1005 WP Statistics < 13.2.2 - Reflected Cross-Site Scripting CWE-79 6.1 - 2022-06-06
CVE-2022-25307 WP Statistics <= 13.1.5 Unauthenticated Stored Cross-Site Scripting via platform CWE-79 7.2 High 2022-02-24
CVE-2022-25305 WP Statistics <= 13.1.5 Unauthenticated Stored Cross-Site Scripting via IP CWE-79 7.2 High 2022-02-24
CVE-2022-25306 WP Statistics <= 13.1.5 Unauthenticated Stored Cross-Site Scripting via browser CWE-79 7.2 High 2022-02-24
CVE-2022-25149 WP Statistics <= 13.1.5 Unauthenticated Blind SQL Injection via IP CWE-89 9.8 Critical 2022-02-24
CVE-2022-0651 WP Statistics <= 13.1.5 Unauthenticated Blind SQL Injection via current_page_type CWE-89 9.8 Critical 2022-02-24
CVE-2022-25148 WP Statistics <= 13.1.5 Unauthenticated Blind SQL Injection via current_page_id CWE-89 9.8 Critical 2022-02-24
CVE-2022-0513 WP Statistics <= 13.1.4 Unauthenticated Blind SQL Injection via exclusion_reason CWE-89 9.8 Critical 2022-02-16
CVE-2021-24340 WP Statistics < 13.0.8 - Unauthenticated SQL Injection CWE-89 7.5 - 2021-06-07
CVE-2017-2135 WordPress WP Statistics 跨站脚本漏洞 6.1 - 2017-04-28
CVE-2017-2147 WordPress WP Statistics 跨站脚本漏洞 6.1 - 2017-04-28
CVE-2017-2136 WordPress WP Statistics 跨站脚本漏洞 6.1 - 2017-04-28

All 21 known CVE vulnerabilities affecting WP Statistics with full Chinese analysis, references, and POCs where available.