Visitor Traffic Real Time Statistics vulnerabilities

2 known vulnerabilities in Visitor Traffic Real Time Statistics from Wp-buy. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.2 High severity

  Visitor Traffic Real Time Statistics: Improper Neutralization of Input During Web Page Generation

  CVE-2026-97341Oct 3, 2026Wp-buy

  The Visitor Traffic Real Time Statistics plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via 'X-Real-IP' HTTP Header in all versions up to, and including, 8.16 due to insufficient input sanitization and output escaping. This makes i

• 7.2 High severity

  Visitor Traffic Real Time Statistics: Improper Neutralization of Input During Web Page Generation

  CVE-2026-2936Apr 4, 2026Wp-buy

  The Visitor Traffic Real Time Statistics plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'page_title' parameter in all versions up to, and including, 8.4 due to insufficient input sanitization and output escaping. This makes it possib