What’s Vulnerable › Products
veronalabs SlimStat Analytics vulnerabilities
22 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 11 published in the last 12 months.
Check whether your veronalabs SlimStat Analytics version is affected
Latest veronalabs SlimStat Analytics vulnerabilities
- CVE-2026-12592 — SlimStat Analytics < 5.5.0 - Unauthenticated Stored XSS via CF-IPCountry Header (CVSS 7.5)
- CVE-2026-54818 — WordPress Slimstat Analytics plugin <= 5.4.11 - SQL Injection vulnerability (CVSS 8.5)
- CVE-2026-27410 — WordPress Slimstat Analytics plugin < 5.4.0 - Deserialization of untrusted data vulnerability (CVSS 6.5)
- CVE-2026-7634 — SlimStat Analytics <= 5.4.11 - Unauthenticated Stored Cross-Site Scripting via User-Agent Header (CVSS 7.2)
- CVE-2026-1238 — SlimStat Analytics <= 5.3.5 - Unauthenticated Stored Cross-Site Scripting via 'fh' (CVSS 7.2)
- CVE-2025-69323 — WordPress Slimstat Analytics plugin <= 5.3.2 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
- CVE-2025-13431 — SlimStat Analytics <= 5.3.1 - Authenticated (Subscriber+) SQL Injection via `args` Parameter (CVSS 6.5)
- CVE-2025-15057 — SlimStat Analytics <= 5.3.3 - Unauthenticated Stored Cross-Site Scripting via 'fh' Parameter (CVSS 7.2)
- CVE-2025-15055 — SlimStat Analytics <= 5.3.4 - Unauthenticated Stored Cross-Site Scripting via 'notes/resource' Parameters (CVSS 7.2)
- CVE-2025-14151 — SlimStat Analytics <= 5.3.2 - Unauthenticated Stored Cross-Site Scripting (CVSS 7.2)
- CVE-2023-33994 — WordPress Slimstat Analytics plugin <= 5.0.5.1 - Broken Access Control vulnerability (CVSS 6.5)
- CVE-2024-9548 — Slimstat Analytics <= 5.2.6 - Unauthenticated Stored Cross-Site Scripting (CVSS 6.1)
- CVE-2024-1073 — SlimStat Analytics <= 5.1.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting (CVSS 5.4)
- CVE-2022-45373 — WordPress Slimstat Analytics Plugin <= 5.0.4 is vulnerable to SQL Injection (CVSS 9.8)
- CVE-2023-4598 — Slimstat Analytics <= 5.0.9 - Authenticated (Contributor+) Blind SQL Injection via Shortcode (CVSS 6.5)
- CVE-2023-40676 — WordPress Slimstat Analytics Plugin <= 5.0.8 is vulnerable to Cross Site Scripting (XSS) (CVSS 4.8)
- CVE-2023-4597 — Slimstat Analytics <= 5.0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode (CVSS 6.4)
- CVE-2022-45366 — WordPress Slimstat Analytics Plugin <= 5.0.4 is vulnerable to Cross Site Scripting (XSS) (CVSS 6.1)
- CVE-2023-0630 — Slimstat Analytics < 4.9.3.3 - Subscriber+ SQL Injection (CVSS 8.8)
- CVE-2022-4310 — Slimstat Analytics < 4.9.3 - Unauthenticated Stored XSS (CVSS 6.1)
- CVE-2019-15112 — (CVSS 6.1)
- CVE-2015-9273 — (CVSS 6.1)