WP Statistics

Unauthenticated Stored CrossSite Scripting via UserAgent Header vulnerability <= 14.15.4

7.1

27 September, 2025

Broken Access Control Vulnerability <= 14.15

4.3

14 August, 2025

Friendly Analytics Plugin plugin <= 14.13.3 Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Settings Update vulnerability <= 14.13.3

5.4

29 April, 2025

Unauthenticated Stored CrossSite Scripting vulnerability <= 14.5

7.1

12 March, 2024

Admin+ SQL Injection vulnerability < 14.0

7.6

28 March, 2023