WP Statistics
- Software type
- WordPress plugin
- Total vulnerabilities (90 days)
- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
As of 10/20/2026, WP Statistics recorded 3 security vulnerabilities in the last 90 days, of which 2 are rated High or Critical. None of these vulnerabilities is actively exploited (KEV) according to CISA's catalog. CyStack recommends that organizations and individual users apply patches as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of WP Statistics and determine which vulnerabilities affect that version.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-97276WordPress WP Statistics plugin <= 14.16.14 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-93770WordPress WP Statistics plugin <= 14.16.13 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-84774WordPress WP Statistics plugin <= 14.16.11 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-48839WordPress WP Statistics plugin <= 14.16.6 - Cross Site Scripting (XSS) vulnerabilityCVE-2025-55716WordPress WP Statistics Plugin <= 14.15 - Broken Access Control Vulnerability| Vulnerability | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2026-97276WordPress WP Statistics plugin <= 14.16.14 - Cross Site Scripting (XSS) vulnerability | Exploitation statusNot exploited | FixYes |
| SeverityHigh |
CVE-2026-93770WordPress WP Statistics plugin <= 14.16.13 - Cross Site Scripting (XSS) vulnerability | Exploitation statusNot exploited | FixYes | Published09/30/2026 | SeverityHigh |
|---|
CVE-2026-84774WordPress WP Statistics plugin <= 14.16.11 - Cross Site Scripting (XSS) vulnerability | Exploitation statusNot exploited | FixYes | Published09/03/2026 | SeverityMedium |
|---|
CVE-2026-48839WordPress WP Statistics plugin <= 14.16.6 - Cross Site Scripting (XSS) vulnerability | Exploitation statusNot exploited | FixYes | Published06/01/2026 | SeverityHigh |
|---|
CVE-2025-55716WordPress WP Statistics Plugin <= 14.15 - Broken Access Control Vulnerability | Exploitation statusNot exploited | FixYes | Published08/14/2025 | SeverityMedium |
|---|
CVE-2022-38074WordPress WP Statistics Plugin <= 13.2.10 is vulnerable to SQL Injection | Exploitation statusNot exploited | FixYes | Published03/13/2023 | SeverityCritical |
|---|
CVE-2022-27231CVE-2022-27231 | Exploitation statusNot confirmed | FixNo | Published06/13/2022 | SeverityUnknown |
|---|
CVE-2022-0513WP Statistics <= 13.1.4 Unauthenticated Blind SQL Injection via exclusion_reason | Exploitation statusNot exploited | FixYes | Published02/16/2022 | SeverityCritical |
|---|
CVE-2021-24340WP Statistics < 13.0.8 - Unauthenticated SQL Injection | Exploitation statusNot confirmed | FixYes | Published06/07/2021 | SeverityUnknown |
|---|
9 Results | Page 1 of 1