WP Statistics – Simple, privacy-friendly Google Analytics alternative vulnerabilities
4 known vulnerabilities in WP Statistics – Simple, privacy-friendly Google Analytics alternative from VeronaLabs. 4 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.2 High severity
WP Statistics – Simple, privacy-friendly…: Improper Neutralization of Input During Web Page Generation
The WP Statistics – Simple, privacy-friendly Google Analytics alternative plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'utm_campaign' parameter in all versions up to, and including, 14.16.8 due to insufficient input sanitization an
- 7.2 High severity
WP Statistics – Simple, privacy-friendly…: Improper Neutralization of Input During Web Page Generation
The WP Statistics plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'utm_source' parameter in all versions up to, and including, 14.16.4. This is due to insufficient input sanitization and output escaping. The plugin's referral parser c
- 7.2 High severity
WP Statistics – Simple, privacy-friendly…: Improper Neutralization of Input During Web Page Generation
The WP Statistics – The Most Popular Privacy-Friendly Analytics Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the User-Agent Header in all versions up to, and including, 14.5.4 due to insufficient input sanitization and output es
- 7.2 High severity
WP Statistics – Simple, privacy-friendly…: Improper Neutralization of Input During Web Page Generation
The WP Statistics plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the URL search parameter in all versions up to, and including, 14.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated a