Lucene search
+L

293 matches found

CNNVD
CNNVD
•added 2026/01/09 12:00 a.m.•17 views

WordPress plugin SlimStat Analytics 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...

7.2CVSS6AI score0.00274EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/09 12:00 a.m.•5 views

CVE-2025-15057: Improper Neutralization of Input During Web Page Generation

The SlimStat Analytics plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the fh fingerprint parameter in all versions up to, and including, 5.3.3. This is due to insufficient input sanitization and output escaping on the fingerprint value stored in the database. This makes it...

7.2CVSS6AI score0.00274EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/01/09 12:00 a.m.•21 views

PT-2026-1766

Name of the Vulnerable Software and Affected Versions SlimStat Analytics plugin for WordPress versions prior to 5.3.5 Description The SlimStat Analytics plugin for WordPress is susceptible to Stored Cross-Site Scripting. This is due to inadequate input sanitization and output escaping in the...

7.2CVSS6.1AI score0.00274EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/09 12:00 a.m.•6 views

CVE-2025-15055: Improper Neutralization of Input During Web Page Generation

The SlimStat Analytics plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'notes' and 'resource' parameters in all versions up to, and including, 5.3.4 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...

7.2CVSS6AI score0.00274EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/01/09 12:00 a.m.•21 views

PT-2026-1767

Name of the Vulnerable Software and Affected Versions SlimStat Analytics plugin for WordPress versions through 5.3.3 Description The SlimStat Analytics plugin for WordPress is susceptible to Stored Cross-Site Scripting due to inadequate input sanitization and output escaping. The issue resides in...

7.2CVSS5.5AI score0.00274EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2025/12/20 9:15 a.m.•19 views

CVE-2025-14151

The SlimStat Analytics plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'outboundresource' parameter in the slimtrack AJAX action in all versions up to, and including, 5.3.2. This is due to insufficient input sanitization and output escaping on user supplied attributes...

6.1CVSS5.2AI score0.00396EPSS
SaveExploits0References1
NVD
NVD
•added 2025/12/19 9:15 a.m.•19 views

CVE-2025-14151

The SlimStat Analytics plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'outboundresource' parameter in the slimtrack AJAX action in all versions up to, and including, 5.3.2. This is due to insufficient input sanitization and output escaping on user supplied attributes...

7.2CVSS0.00396EPSS
SaveExploits0References4
CVE
CVE
•added 2025/12/19 8:23 a.m.•28 views

CVE-2025-14151

CVE-2025-14151 affects SlimStat Analytics for WordPress. The vulnerability is a Stored XSS via the outbound_resource attribute in the slimtrack AJAX action in all versions up to 5.3.2, caused by insufficient input sanitization and output escaping. Unauthenticated attackers can inject scripts that...

7.2CVSS6.1AI score0.00396EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/12/19 8:23 a.m.•16 views

EUVD-2025-204479

The SlimStat Analytics plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'outboundresource' parameter in the slimtrack AJAX action in all versions up to, and including, 5.3.2. This is due to insufficient input sanitization and output escaping on user supplied attributes...

6.1CVSS4.8AI score0.00396EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2025/12/19 8:23 a.m.•8 views

CVE-2025-14151 SlimStat Analytics <= 5.3.2 - Unauthenticated Stored Cross-Site Scripting

The SlimStat Analytics plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'outboundresource' parameter in the slimtrack AJAX action in all versions up to, and including, 5.3.2. This is due to insufficient input sanitization and output escaping on user supplied attributes...

7.2CVSS6.1AI score0.00396EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2025/12/19 8:23 a.m.•45 views

CVE-2025-14151 SlimStat Analytics <= 5.3.2 - Unauthenticated Stored Cross-Site Scripting

The SlimStat Analytics plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'outboundresource' parameter in the slimtrack AJAX action in all versions up to, and including, 5.3.2. This is due to insufficient input sanitization and output escaping on user supplied attributes...

7.2CVSS0.00396EPSS
SaveExploits0References4
Patchstack
Patchstack
•added 2025/12/19 7:32 a.m.•18 views

WordPress SlimStat Analytics plugin <= 5.3.2 - Unauthenticated Stored Cross-Site Scripting vulnerability

Unauthenticated Stored Cross-Site Scripting vulnerability discovered by Supakiad S. m3ez - E-CQURITY Thailand in WordPress Plugin Slimstat Analytics versions = 5.3.2...

6.1CVSS5.6AI score0.00396EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/19 12:00 a.m.•1 views

CVE-2025-14151: Improper Neutralization of Input During Web Page Generation

The SlimStat Analytics plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'outboundresource' parameter in the slimtrack AJAX action in all versions up to, and including, 5.3.2. This is due to insufficient input sanitization and output escaping on user supplied attributes...

7.2CVSS6AI score0.00396EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/12/19 12:00 a.m.•23 views

PT-2025-52436

The SlimStat Analytics plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'outbound resource' parameter in the slimtrack AJAX action in all versions up to, and including, 5.3.2. This is due to insufficient input sanitization and output escaping on user supplied attributes...

6.1CVSS5.2AI score0.00396EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2025/12/19 12:00 a.m.•16 views

WordPress plugin SlimStat Analytics 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin... A cross-site scripti...

7.2CVSS5.8AI score0.00396EPSS
SaveExploits0References5
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•15 views

EUVD-2015-9115

Malware in sbrugna...

6.1CVSS6.3AI score0.0133EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•14 views

EUVD-2015-1345

Malware in sbrugna...

4.3CVSS6.2AI score0.02346EPSS
SaveExploits1References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•17 views

EUVD-2019-6183

Malware in sbrugna...

6.1CVSS6.1AI score0.01046EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•13 views

EUVD-2024-16848

Malicious code in bioql PyPI...

6.4CVSS6.6AI score0.00449EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•19 views

EUVD-2023-54452

Malicious code in bioql PyPI...

6.4CVSS6.4AI score0.00519EPSS
SaveExploits0References3
Rows per page
Query Builder