SlimStat Analytics

Уязвимости

• CVE-2022-45373без авторизации · нужен клик≤ 5.0.4

  WordPress Slimstat Analytics Plugin <= 5.0.4 is vulnerable to SQL Injection

  Критич. 9.8

• CVE-2026-54818нужен вход≤ 5.4.11

  WordPress Slimstat Analytics plugin <= 5.4.11 - SQL Injection vulnerability

  Высокий 8.5

• CVE-2026-7634без авторизации≤ 5.4.11

  SlimStat Analytics <= 5.4.11 - Unauthenticated Stored Cross-Site Scripting via User-Agent Header

  Высокий 7.2

• CVE-2026-1238без авторизации≤ 5.3.5

  SlimStat Analytics <= 5.3.5 - Unauthenticated Stored Cross-Site Scripting via 'fh'

  Высокий 7.2

• CVE-2025-15057без авторизации≤ 5.3.3

  SlimStat Analytics <= 5.3.3 - Unauthenticated Stored Cross-Site Scripting via 'fh' Parameter

  Высокий 7.2

• CVE-2025-15055без авторизации≤ 5.3.4

  SlimStat Analytics <= 5.3.4 - Unauthenticated Stored Cross-Site Scripting via 'notes/resource' Parameters

  Высокий 7.2

• CVE-2025-14151без авторизации≤ 5.3.2

  SlimStat Analytics <= 5.3.2 - Unauthenticated Stored Cross-Site Scripting

  Высокий 7.2

• CVE-2025-69323без авторизации · нужен клик≤ 5.3.2

  WordPress Slimstat Analytics plugin <= 5.3.2 - Reflected Cross Site Scripting (XSS) vulnerability

  Высокий 7.1

• CVE-2026-27410без авторизации→ 5.4.0

  WordPress Slimstat Analytics plugin < 5.4.0 - Deserialization of untrusted data vulnerability

  Средний 6.5

• CVE-2023-33994без авторизации≤ 5.0.5.1

  WordPress Slimstat Analytics plugin <= 5.0.5.1 - Broken Access Control vulnerability

  Средний 6.5

• CVE-2025-13431подписчик+≤ 5.3.1

  SlimStat Analytics <= 5.3.1 - Authenticated (Subscriber+) SQL Injection via `args` Parameter

  Средний 6.5

• CVE-2023-4598участник+≤ 5.0.9

  Slimstat Analytics <= 5.0.9 - Authenticated (Contributor+) Blind SQL Injection via Shortcode

  Средний 6.5

• CVE-2023-4597участник+≤ 5.0.9

  Slimstat Analytics <= 5.0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

  Средний 6.4

• CVE-2024-9548без авторизации≤ 5.2.6

  Slimstat Analytics <= 5.2.6 - Unauthenticated Stored Cross-Site Scripting

  Средний 6.1

• CVE-2022-45366без авторизации · нужен клик≤ 5.0.4

  WordPress Slimstat Analytics Plugin <= 5.0.4 is vulnerable to Cross Site Scripting (XSS)

  Средний 6.1

• CVE-2019-15112без авторизации · нужен клик

  The wp-slimstat plugin before 4.8.1 for WordPress has XSS.

  Средний 6.1

• CVE-2024-1073подписчик+≤ 5.1.3

  SlimStat Analytics <= 5.1.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting

  Средний 5.4

• CVE-2023-40676админ≤ 5.0.8

  WordPress Slimstat Analytics Plugin <= 5.0.8 is vulnerable to Cross Site Scripting (XSS)

  Средний 4.8

• CVE-2015-1204

  Cross-site scripting (XSS) vulnerability in the Save Filters functionality in the WP Slimstat plugin before 3.9.2 for WordPress allows remot

  Средний 4.3