NewStatPress vulnerabilities

2 known vulnerabilities in NewStatPress from Ice00. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.2 High severity

  NewStatPress: Improper Neutralization of Input During Web Page Generation

  CVE-2026-101924Oct 14, 2026Ice00

  The NewStatPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 1.4.5 via the 'Last referrers' meta box on the plugin's Overview admin page. This is due to insufficient output escaping of the visitor-supplie

• 7.2 High severity

  NewStatPress: Improper Neutralization of Input During Web Page Generation

  CVE-2026-100153Oct 14, 2026Ice00

  The NewStatPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'QUERY_STRING / REQUEST_URI' parameter in all versions up to, and including, 1.4.5 due to insufficient input sanitization and output escaping. This makes it possible for