WP Visitor Statistics (Real Time Traffic) vulnerabilities

Product

WP Visitor Statistics (Real Time Traffic)

by osamaesh · last CVE Oct 28, 2026

CVEs

On KEV

7.5

Max CVSS

New 30D

Severity mix

Critical 0High 2Medium 2Low 0

Severity

Exploitation

Watch

Add WP Visitor Statistics (Real Time Traffic) to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-96267	7.5	0%	Oct 3	WP Visitor Statistics (Real Time Traffic) <= 8.7 - Unauthenticated SQL Injection via 'fullRef' Parameter Affected: through 8.7
CVE-2024-24867	7.5	0%	Mar 17	WordPress WP Stats Manager plugin <= 6.9.4 - Sensitive Data Exposure vulnerability Affected: through 6.9.4
CVE-2026-116609 New	6.5	0%	Oct 28	WP Visitor Statistics (Real Time Traffic) <= 8.8 - Authenticated (Contributor+) SQL Injection via 'from' Shortcode Attribute Affected: through 8.8
CVE-2026-4303	6.4	0%	Apr 8	WP Visitor Statistics (Real Time Traffic) <= 8.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'height' Shortcode Attribute Affected: through 8.4