Veronalabs vulnerabilities
44 CVEs and advisories name Veronalabs as an affected vendor, newest first. Follow it as a feed.
- CVE-2024-2194WP Statistics <= 14.5 - Unauthenticated Stored Cross-Site Scripting
- CVE-2024-24881WordPress WP SMS Plugin <= 6.5.2 is vulnerable to Cross Site Scripting (XSS)
- CVE-2024-1073SlimStat Analytics <= 5.1.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting
- CVE-2023-6981WP SMS <= 6.5 - Authenticated (Admin+) SQL Injection to Reflected Cross-Site Scripting
- CVE-2023-6980WP SMS <= 6.5 - Cross-Site Request Forgery to Subscriber Deletion
- CVE-2023-27447WordPress WP SMS Plugin <= 6.0.4 is vulnerable to Sensitive Data Exposure
- CVE-2023-4598Slimstat Analytics <= 5.0.9 - Authenticated (Contributor+) Blind SQL Injection via Shortcode
- CVE-2023-32742WordPress WP SMS Plugin <= 6.1.4 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-4597Slimstat Analytics <= 5.0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
- CVE-2022-38074WordPress WP Statistics Plugin <= 13.2.10 is vulnerable to SQL Injection
- CVE-2021-4333WP Statistics <= 13.1.1 - Cross-Site Request Forgery to Arbitrary Plugin Activation and Deactivation
- CVE-2022-27231Cross-site scripting vulnerability exists in WP Statistics versions prior to 13.2.0 because it improperly processes a platform parameter.
- CVE-2022-0513WP Statistics <= 13.1.4 Unauthenticated Blind SQL Injection via exclusion_reason
- CVE-2021-24340WP Statistics < 13.0.8 - Unauthenticated SQL Injection