Browse all 3 CVE security advisories affecting StatCounter. AI-powered Chinese analysis, POCs, and references for each vulnerability.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-57629 | WordPress StatCounter plugin <= 2.1.1 - Cross Site Scripting (XSS) vulnerability — StatCounterCWE-79 | 6.5 | Medium | 2026-06-26 |
| CVE-2026-6275 | StatCounter <= 2.1.1 - Authenticated (Author+) Stored Cross-Site Scripting via Author Nickname — StatCounter – Free Real Time Visitor StatsCWE-79 | 6.4 | Medium | 2026-05-29 |
| CVE-2025-13048 | Official StatCounter Plugin <= 2.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Nickname — StatCounter – Free Real Time Visitor StatsCWE-79 | 6.4 | Medium | 2026-02-19 |
This page lists every published CVE security advisory associated with StatCounter. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.