Login Request a demo
SA
Product
Slimstat Analytics
by veronalabs · last CVE Jun 17, 2026
14
CVEs
0
On KEV
8.5
Max CVSS
0
New 30D
Vulnerabilities14In the news0Timeline
Severity mix
Critical 0High 7Medium 7Low 0
Severity
All severities14Critical0High7Medium7Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Slimstat Analytics to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-54818
8.5
0%
Jun 17
WordPress Slimstat Analytics plugin <= 5.4.11 - SQL Injection vulnerability
Affected: through 5.4.11
CVE-2026-7634
7.2
0%
May 28
SlimStat Analytics <= 5.4.11 - Unauthenticated Stored Cross-Site Scripting via User-Agent Header
Affected: through 5.4.11
CVE-2026-1238
7.2
0%
Mar 19
SlimStat Analytics <= 5.3.5 - Unauthenticated Stored Cross-Site Scripting via 'fh'
Affected: through 5.3.5
CVE-2025-15055
7.2
0%
Jan 9
SlimStat Analytics <= 5.3.4 - Unauthenticated Stored Cross-Site Scripting via 'notes/resource' Parameters
Affected: through 5.3.4
CVE-2025-15057
7.2
0%
Jan 9
SlimStat Analytics <= 5.3.3 - Unauthenticated Stored Cross-Site Scripting via 'fh' Parameter
Affected: through 5.3.3
CVE-2025-14151
7.2
0%
Dec 19
SlimStat Analytics <= 5.3.2 - Unauthenticated Stored Cross-Site Scripting
Affected: through 5.3.2
CVE-2025-69323
7.1
0%
Feb 20
WordPress Slimstat Analytics plugin <= 5.3.2 - Reflected Cross Site Scripting (XSS) vulnerability
Affected: through 5.3.2
CVE-2026-27410
6.5
0%
Jun 17
WordPress Slimstat Analytics plugin < 5.4.0 - Deserialization of untrusted data vulnerability
Affected: before 5.4.0
CVE-2025-13431
6.5
0%
Feb 11
SlimStat Analytics <= 5.3.1 - Authenticated (Subscriber+) SQL Injection via `args` Parameter
Affected: through 5.3.1
CVE-2023-33994
6.5
1%
Dec 13
WordPress Slimstat Analytics plugin <= 5.0.5.1 - Broken Access Control vulnerability
Affected: through 5.0.5.1
CVE-2023-4598
6.5
1%
Oct 20
Slimstat Analytics <= 5.0.9 - Authenticated (Contributor+) Blind SQL Injection via Shortcode
Affected: through 5.0.9
CVE-2023-4597
6.4
1%
Aug 30
Slimstat Analytics <= 5.0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Affected: through 5.0.9
CVE-2024-9548
6.1
1%
Oct 14
Slimstat Analytics <= 5.2.6 - Unauthenticated Stored Cross-Site Scripting
Affected: through 5.2.6
CVE-2024-1073
5.4
0%
Feb 2
SlimStat Analytics <= 5.1.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Affected: through 5.1.3
Showing 14