Mittel
CVE-2026-97276
Schwachstellenarchiv
Schwachstellen verstehen. Anwendungen schützen.
Erfahren Sie, welche Schwachstellen Ihre Technologien betreffen und wie Sie diese beheben. Hier finden Sie verständliche Erklärungen, betroffene Versionen und konkrete Empfehlungen - von CMS und Plugins bis zu Anwendungsbibliotheken.
Schwachstellenarchiv 44
Filter zurücksetzen
Mittel
CVE-2026-97652
WP Statistics <= 14.16.14 - Reflected Cross-Site Scripting via REQUEST_URI Query-Parameter Key
Hoch
CVE-2026-93770
WP Statistics – Simple, privacy-friendly Google Analytics alternative <= 14.16.13 - Unauthenticated Stored Cross-Site Scripting
Hoch
CVE-2026-84774
WP Statistics – Simple, privacy-friendly Google Analytics alternative <= 14.16.11 - Unauthenticated Stored Cross-Site Scripting
Hoch
CVE-2026-15780
WP Statistics <= 14.16.8 - Unauthenticated Stored Cross-Site Scripting via 'utm_campaign' Parameter
Mittel
CVE-2026-16562
Statistics <= 14.16.9 - Authenticated (Subscriber+) Information Exposure
Hoch
CVE-2026-48839
WP Statistics – Simple, privacy-friendly Google Analytics alternative <= 14.16.6 - Unauthenticated Stored Cross-Site Scripting
Mittel
CVE-2026-3488
WP Statistics <= 14.16.4 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure and Privacy Audit Manipulation
Hoch
CVE-2026-5231
WP Statistics <= 14.16.4 - Unauthenticated Stored Cross-Site Scripting via 'utm_source' Parameter
Hoch
CVE-2025-9816
WP Statistics <= 14.15.4 - Unauthenticated Stored Cross-Site Scripting via User-Agent Header
Mittel
CVE-2025-55716
WP Statistics <= 14.15 - Missing Authorization
Mittel
CVE-2025-3953
WP Statistics – The Most Popular Privacy-Friendly Analytics Plugin <= 14.13.3 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Settings Update
Hoch
CVE-2024-2194
WP Statistics <= 14.5 - Unauthenticated Stored Cross-Site Scripting
Hoch
CVE-2023-0955
WP Statistics <= 13.2.16 - Authenticated (Admin+) SQL Injection
Hoch
CVE-2022-38074
WP Statistics <= 13.2.10 - Authenticated (Subscriber+) SQL Injection
Hoch
CVE-2022-4230
WP Statistics <= 13.2.8 - Authenticated (Admin+) SQL Injection
Hoch
42f54887-ce98-4360-8d07-37b1a48fc3fd
WP Statistics <= 13.2.5 - Authenticated (Subscriber+) SQL Injection
Mittel
7a0c6425-866d-4b50-b464-87a8173c4abd
WP Statistics <= 13.2.5 - Information Disclosure
Mittel
CVE-2022-27231
WP Statistics <= 13.1.7 - Cross-Site Scripting
Mittel
CVE-2022-1005
WP Statistics <= 13.2.1 - Reflected Cross-Site Scripting
Hoch
CVE-2022-25307
WP Statistics <= 13.1.5 - Unauthenticated Stored Cross-Site Scripting via platform
Hoch
CVE-2022-25306
WP Statistics <= 13.1.5 - Unauthenticated Stored Cross-Site Scripting via browser
Kritisch
CVE-2022-25149
WP Statistics <= 13.1.5 - Unauthenticated Blind SQL Injection via IP
Hoch
CVE-2022-25305
WP Statistics <= 13.1.5 - Unauthenticated Stored Cross-Site Scripting via IP
Erkennen Sie Schwachstellen in Ihrer Anwendung
Mit der DockRay-Integration und aktivierter Softwareinventarisierung prüft DockRay gemeldete Komponentenversionen auf bekannte Schwachstellen und benachrichtigt Sie über bestätigte Treffer. Die Abdeckung hängt von der unterstützten Technologie und den verfügbaren Meldungen ab.