Skip to content
Noroxi

NewStatPress

newstatpress · plugin

Known security vulnerabilities for NewStatPress. Find out in seconds which version runs on your site with WP Lens.

9 known vulnerabilities

2 critical · 3 with public exploit code · latest Dec 12, 2025

Vulnerabilities

  • CVE-2015-9315

    The newstatpress plugin before 1.0.1 for WordPress has SQL injection.

    Critical 9.8

  • CVE-2015-9313

    The newstatpress plugin before 1.0.5 for WordPress has SQL injection related to an IMG element.

    Critical 9.8

  • CVE-2015-4062

    SQL injection vulnerability in includes/nsp_search.php in the NewStatPress plugin before 0.9.9 for WordPress allows remote authenticated use

    Medium 6.5

  • CVE-2025-13747

    NewStatPress <= 1.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting

    Medium 6.4

  • CVE-2017-18575

    The newstatpress plugin before 1.2.5 for WordPress has multiple stored XSS issues.

    Medium 6.1

  • CVE-2015-9314

    The newstatpress plugin before 1.0.4 for WordPress has XSS related to the Referer header.

    Medium 6.1

  • CVE-2015-9312

    The newstatpress plugin before 1.0.5 for WordPress has XSS related to an IMG element.

    Medium 6.1

  • CVE-2015-9311

    The newstatpress plugin before 1.0.6 for WordPress has reflected XSS.

    Medium 6.1

  • CVE-2015-4063

    Cross-site scripting (XSS) vulnerability in includes/nsp_search.php in the NewStatPress plugin before 0.9.9 for WordPress allows remote auth

    Low 3.5

← Back to directory