SlimStat Analytics vulnerabilities
We track 2 vulnerabilities in SlimStat Analytics products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on July 20, 2026.
2vulnerabilities
0critical
2high
0exploited
8.2average CVSS score
Latest SlimStat Analytics vulnerabilities
- 7.5 High severity
SlimStat Analytics: Improper Neutralization of Input During Web Page Generation
The SlimStat Analytics WordPress plugin before 5.5.0 does not escape a visitor-controlled geolocation value before outputting it in its admin analytics reports, allowing unauthenticated visitors to store a cross-site scripting payload that executes in the brow
- 8.8 High severity
Slimstat Analytics: Improper Neutralization of Special Elements used in an SQL Command
The Slimstat Analytics WordPress plugin before 4.9.3.3 does not prevent subscribers from rendering shortcodes that concatenates attributes directly into an SQL query.