Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

197 matches found

Vulnrichment
Vulnrichment•added 2026/02/11 1:23 a.m.•3 views

CVE-2025-13431 SlimStat Analytics <= 5.3.1 - Authenticated (Subscriber+) SQL Injection via `args` Parameter

The SlimStat Analytics plugin for WordPress is vulnerable to time-based SQL Injection via the ‘args’ parameter in all versions up to, and including, 5.3.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possib...

6.5CVSS5.9AI score0.00217EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB•added 2026/02/11 1:23 a.m.•4 views

CVE-2025-13431

The SlimStat Analytics plugin for WordPress is vulnerable to time-based SQL Injection via the ‘args’ parameter in all versions up to, and including, 5.3.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possib...

6.5CVSS5.9AI score0.00217EPSS
SaveExploits0References3
Cvelist
Cvelist•added 2026/02/11 1:23 a.m.•34 views

CVE-2025-13431 SlimStat Analytics <= 5.3.1 - Authenticated (Subscriber+) SQL Injection via `args` Parameter

The SlimStat Analytics plugin for WordPress is vulnerable to time-based SQL Injection via the ‘args’ parameter in all versions up to, and including, 5.3.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possib...

6.5CVSS0.00217EPSS
SaveExploits0References2
CVE
CVE•added 2026/02/11 1:23 a.m.•20 views

CVE-2025-13431

CVE-2025-13431 affects SlimStat Analytics for WordPress (versions

6.5CVSS5.9AI score0.00217EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies•added 2026/02/11 12:0 a.m.•6 views

PT-2026-7479

The SlimStat Analytics plugin for WordPress is vulnerable to time-based SQL Injection via the ‘args’ parameter in all versions up to, and including, 5.3.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possib...

6.5CVSS5.9AI score0.00217EPSS
SaveExploits0References3
Patchstack
Patchstack•added 2026/01/27 6:53 a.m.•6 views

WordPress Slimstat Analytics plugin <= 5.3.2 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by mcdruid in WordPress Plugin Slimstat Analytics versions = 5.3.2...

7.1CVSS5.9AI score0.00175EPSS
SaveExploits0Affected Software1
RedhatCVE
RedhatCVE•added 2026/01/13 10:52 p.m.•12 views

CVE-2025-15057

The SlimStat Analytics plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the fh fingerprint parameter in all versions up to, and including, 5.3.3. This is due to insufficient input sanitization and output escaping on the fingerprint value stored in the database. This makes it...

7.2CVSS5.2AI score0.00247EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE•added 2026/01/09 9:25 a.m.•6 views

CVE-2023-4599

The Email Encoder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'eebmailto' shortcode in versions up to, and including, 2.1.8 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with...

6.4CVSS6.8AI score0.0045EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE•added 2026/01/09 9:24 a.m.•7 views

CVE-2023-40676

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Jason Crouse, VeronaLabs Slimstat Analytics plugin = 5.0.8 versions...

5.9CVSS5.6AI score0.00354EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE•added 2026/01/09 8:57 a.m.•7 views

CVE-2023-4598

The Slimstat Analytics plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and including, 5.0.9 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for...

8.8CVSS6.6AI score0.00916EPSS
SaveExploits4References1
Patchstack
Patchstack•added 2026/01/09 7:58 a.m.•9 views

WordPress SlimStat Analytics plugin <= 5.3.3 - Unauthenticated Stored Cross-Site Scripting via 'fh' Parameter vulnerability

Unauthenticated Stored Cross-Site Scripting via 'fh' Parameter vulnerability discovered by Supakiad S. m3ez - E-CQURITY Thailand in WordPress Plugin Slimstat Analytics versions = 5.3.3...

7.2CVSS5.8AI score0.00247EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack•added 2026/01/09 7:41 a.m.•8 views

WordPress SlimStat Analytics plugin <= 5.3.4 - Unauthenticated Stored Cross-Site Scripting via 'notes/resource' Parameters vulnerability

Unauthenticated Stored Cross-Site Scripting via 'notes/resource' Parameters vulnerability discovered by Supakiad S. m3ez - E-CQURITY Thailand in WordPress Plugin Slimstat Analytics versions = 5.3.4...

7.2CVSS5.8AI score0.00247EPSS
SaveExploits0References1Affected Software1
NVD
NVD•added 2026/01/09 7:16 a.m.•12 views

CVE-2025-15057

The SlimStat Analytics plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the fh fingerprint parameter in all versions up to, and including, 5.3.3. This is due to insufficient input sanitization and output escaping on the fingerprint value stored in the database. This makes it...

7.2CVSS0.00247EPSS
SaveExploits0References2
NVD
NVD•added 2026/01/09 7:16 a.m.•13 views

CVE-2025-15055

The SlimStat Analytics plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'notes' and 'resource' parameters in all versions up to, and including, 5.3.4 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...

7.2CVSS0.00247EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment•added 2026/01/09 6:34 a.m.•3 views

CVE-2025-15055 SlimStat Analytics <= 5.3.4 - Unauthenticated Stored Cross-Site Scripting via 'notes/resource' Parameters

The SlimStat Analytics plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'notes' and 'resource' parameters in all versions up to, and including, 5.3.4 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...

7.2CVSS4.9AI score0.00247EPSS
SaveExploits0References2
CVE
CVE•added 2026/01/09 6:34 a.m.•27 views

CVE-2025-15057

CVE-2025-15057 affects the SlimStat Analytics WordPress plugin. It is a stored cross-site scripting vulnerability in the fingerprint parameter (fh) that is stored in the database and executed when an administrator views the Real-time Access Log report. Affected versions are all up to and includin...

7.2CVSS4.8AI score0.00247EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment•added 2026/01/09 6:34 a.m.•7 views

CVE-2025-15057 SlimStat Analytics <= 5.3.3 - Unauthenticated Stored Cross-Site Scripting via 'fh' Parameter

The SlimStat Analytics plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the fh fingerprint parameter in all versions up to, and including, 5.3.3. This is due to insufficient input sanitization and output escaping on the fingerprint value stored in the database. This makes it...

7.2CVSS4.8AI score0.00247EPSS
SaveExploits0References2
CVE
CVE•added 2026/01/09 6:34 a.m.•24 views

CVE-2025-15055

CVE-2025-15055 : WordPress SlimStat Analytics plugin is vulnerable to unauthenticated Stored Cross-Site Scripting via the notes and resource parameters in versions up to 5.3.4. The flaw arises from insufficient input sanitization and output escaping, enabling an attacker to inject script that exe...

7.2CVSS4.9AI score0.00247EPSS
SaveExploits0References2
Cvelist
Cvelist•added 2026/01/09 6:34 a.m.•35 views

CVE-2025-15055 SlimStat Analytics <= 5.3.4 - Unauthenticated Stored Cross-Site Scripting via 'notes/resource' Parameters

The SlimStat Analytics plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'notes' and 'resource' parameters in all versions up to, and including, 5.3.4 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...

7.2CVSS0.00247EPSS
SaveExploits0References2
Cvelist
Cvelist•added 2026/01/09 6:34 a.m.•29 views

CVE-2025-15057 SlimStat Analytics <= 5.3.3 - Unauthenticated Stored Cross-Site Scripting via 'fh' Parameter

The SlimStat Analytics plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the fh fingerprint parameter in all versions up to, and including, 5.3.3. This is due to insufficient input sanitization and output escaping on the fingerprint value stored in the database. This makes it...

7.2CVSS0.00247EPSS
SaveExploits0References2
Rows per page
Query Builder