What’s Vulnerable › Products

WP Visitor Statistics (Real Time Traffic) vulnerabilities

9 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your WP Visitor Statistics (Real Time Traffic) version is affected

Latest WP Visitor Statistics (Real Time Traffic) vulnerabilities

• CVE-2026-116609 — WP Visitor Statistics (Real Time Traffic) <= 8.8 - Authenticated (Contributor+) SQL Injection via 'from' Shortcode Attribute (CVSS 6.5)
• CVE-2026-96267 — WP Visitor Statistics (Real Time Traffic) <= 8.7 - Unauthenticated SQL Injection via 'fullRef' Parameter (CVSS 7.5)
• CVE-2026-4303 — WP Visitor Statistics (Real Time Traffic) <= 8.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'height' Shortcode Attribute (CVSS 6.4)
• CVE-2024-24867 — WordPress WP Stats Manager plugin <= 6.9.4 - Sensitive Data Exposure vulnerability (CVSS 7.5)
• CVE-2023-0600 — WP Visitor Statistics (Real Time Traffic) < 6.9 - Unauthenticated SQLi (CVSS 9.8)
• CVE-2022-4656 — WP Visitor Statistics (Real Time Traffic) < 6.5 - Contributor+ Stored XSS via Shortcode (CVSS 5.4)
• CVE-2022-33965 — WordPress WP Visitor Statistics plugin <= 5.7 - Multiple Unauthenticated SQL Injection (SQLi) vulnerabilities (CVSS 9.8)
• CVE-2022-0410 — WP Visitor Statistics (Real Time Traffic) < 5.6 - Subscriber+ SQL Injection (CVSS 8.8)
• CVE-2021-25042 — WP Visitor Statistics (Real Time Traffic) < 5.5 - Arbitrary IP Address Exclusion to Stored XSS (CVSS 5.4)
• CVE-2021-24750 — WP Visitor Statistics (Real Time Traffic) < 4.8 - Subscriber+ SQL Injection (CVSS 8.8)