Skip to content
Noroxi

WP Visitor Statistics (Real Time Traffic)

wp-stats-manager · plugin

Known security vulnerabilities for WP Visitor Statistics (Real Time Traffic). Find out in seconds which version runs on your site with WP Lens.

9 known vulnerabilities

2 critical · 1 with public exploit code · latest Apr 8, 2026

Vulnerabilities

  • CVE-2025-49400

    WordPress WP Visitor Statistics (Real Time Traffic) Plugin <= 8.2 - Cross Site Scripting (XSS) Vulnerability

    Critical 9.8
  • CVE-2022-33965

    WordPress WP Visitor Statistics plugin <= 5.7 - Multiple Unauthenticated SQL Injection (SQLi) vulnerabilities

    Critical 9.8
  • CVE-2024-24867

    WordPress WP Stats Manager plugin <= 6.9.4 - Sensitive Data Exposure vulnerability

    High 7.5
  • CVE-2025-67983

    WordPress WP Visitor Statistics (Real Time Traffic) plugin <= 8.3 - Cross Site Scripting (XSS) vulnerability

    Medium 6.5
  • CVE-2025-53566

    WordPress WP Visitor Statistics (Real Time Traffic) plugin <= 7.8 - Cross Site Scripting (XSS) Vulnerability

    Medium 6.5
  • CVE-2025-24675

    WordPress WP Visitor Statistics (Real Time Traffic) plugin <= 7.2 - Cross Site Scripting (XSS) vulnerability

    Medium 6.5
  • CVE-2026-4303

    WP Visitor Statistics (Real Time Traffic) <= 8.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'height' Shortcode Attribute

    Medium 6.4
  • CVE-2025-49996

    WordPress WP Visitor Statistics (Real Time Traffic) plugin <= 8.4 - Broken Access Control vulnerability

    Medium 5.3
  • CVE-2025-22304

    WordPress WP Visitor Statistics plugin <= 7.5 - Broken Access Control vulnerability

    Medium 4.3

← Back to directory