Osamaesh vulnerabilities
We track 4 vulnerabilities in Osamaesh products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on November 7, 2026.
Latest Osamaesh vulnerabilities
- 7.2 High severity
WP Visitor Statistics (Real Time Traffic): Improper Neutralization of Input During Web Page Generation
The WP Visitor Statistics (Real Time Traffic) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'os (also browser, res)' parameter in all versions up to, and including, 8.9.0 due to insufficient input sanitization and output escaping. T
- 7.2 High severity
WP Visitor Statistics (Real Time Traffic): Improper Neutralization of Input During Web Page Generation
The WP Visitor Statistics (Real Time Traffic) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'browser' parameter in all versions up to, and including, 8.7.1 due to insufficient input sanitization and output escaping. This makes it po
- 7.5 High severity
WP Visitor Statistics (Real Time Traffic): Improper Neutralization of Special Elements used in an SQL Command
The WP Visitor Statistics (Real Time Traffic) plugin for WordPress is vulnerable to generic SQL Injection via the 'fullRef' parameter in all versions up to, and including, 8.7 due to insufficient escaping on the user supplied parameter and lack of sufficient p
- 7.5 High severity
WP Visitor Statistics (Real Time Traffic): Exposure of Sensitive Information to an Unauthorized Actor
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Osamaesh WP Visitor Statistics (Real Time Traffic).This issue affects WP Visitor Statistics (Real Time Traffic): from n/a through 6.9.4.