Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

Slimstat Analytics — Vulnerabilities & Security Advisories 20

All 20 CVE vulnerabilities found in Slimstat Analytics, with AI-generated Chinese analysis, references, and POCs.

This page documents known vulnerabilities for Slimstat Analytics, focusing on weaknesses within the vendor’s software ecosystem. It aggregates a comprehensive collection of security issues affecting this specific product line, including buffer overflows, injection flaws, and insecure direct object references. The data covers vulnerability reports spanning from early releases through to the most recent patches issued by the vendor, ensuring a historical perspective on the software’s security posture. Users can utilize this resource to track a vendor’s advisories as they are published and released, providing real-time insight into emerging threats. Furthermore, the page allows security professionals to understand a weakness class by examining how it manifests within the context of Slimstat Analytics, offering detailed contextual analysis beyond generic descriptions. Readers can also look up a product's vulnerability history to assess the long-term security maintenance and patching cadence of the platform. This centralized view helps administrators evaluate risk exposure and prioritize remediation efforts based on the severity and relevance of each identified flaw. By consolidating these diverse data points, the page serves as a vital reference for developers, security auditors, and system integrators who rely on Slimstat Analytics. The information is organized to facilitate easy navigation, allowing stakeholders to quickly identify critical updates and understand the evolution of security challenges faced by the product over time.

Vendor: Unknown

CVE IDTitleCVSSSeverityPublished
CVE-2026-12592 SlimStat Analytics < 5.5.0 - Unauthenticated Stored XSS via CF-IPCountry Header --2026-07-20
CVE-2026-54818 WordPress Slimstat Analytics plugin <= 5.4.11 - SQL Injection vulnerability CWE-89 8.5 High2026-06-17
CVE-2026-27410 WordPress Slimstat Analytics plugin < 5.4.0 - Deserialization of untrusted data vulnerability CWE-502 6.5 Medium2026-06-17
CVE-2026-7634 SlimStat Analytics <= 5.4.11 - Unauthenticated Stored Cross-Site Scripting via User-Agent Header CWE-79 7.2 High2026-05-28
CVE-2026-1238 SlimStat Analytics <= 5.3.5 - Unauthenticated Stored Cross-Site Scripting via 'fh' CWE-79 7.2 High2026-03-19
CVE-2025-69323 WordPress Slimstat Analytics plugin <= 5.3.2 - Reflected Cross Site Scripting (XSS) vulnerability CWE-79 7.1 High2026-02-20
CVE-2025-13431 SlimStat Analytics <= 5.3.1 - Authenticated (Subscriber+) SQL Injection via `args` Parameter CWE-89 6.5 Medium2026-02-11
CVE-2025-15055 SlimStat Analytics <= 5.3.4 - Unauthenticated Stored Cross-Site Scripting via 'notes/resource' Parameters CWE-79 7.2 High2026-01-09
CVE-2025-15057 SlimStat Analytics <= 5.3.3 - Unauthenticated Stored Cross-Site Scripting via 'fh' Parameter CWE-79 7.2 High2026-01-09
CVE-2025-14151 SlimStat Analytics <= 5.3.2 - Unauthenticated Stored Cross-Site Scripting CWE-79 7.2 High2025-12-19
CVE-2023-33994 WordPress Slimstat Analytics plugin <= 5.0.5.1 - Broken Access Control vulnerability CWE-862 6.5 Medium2024-12-13
CVE-2024-9548 Slimstat Analytics <= 5.2.6 - Unauthenticated Stored Cross-Site Scripting CWE-79 7.2 High2024-10-14
CVE-2024-1073 SlimStat Analytics <= 5.1.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting CWE-79 6.4 Medium2024-02-02
CVE-2022-45373 WordPress Slimstat Analytics Plugin <= 5.0.4 is vulnerable to SQL Injection CWE-89 8.8 High2023-11-06
CVE-2023-4598 Slimstat Analytics <= 5.0.9 - Authenticated (Contributor+) Blind SQL Injection via Shortcode CWE-89 8.8 High2023-10-20
CVE-2023-40676 WordPress Slimstat Analytics Plugin <= 5.0.8 is vulnerable to Cross Site Scripting (XSS) CWE-79 5.9 Medium2023-09-27
CVE-2023-4597 Slimstat Analytics <= 5.0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode CWE-79 6.4 Medium2023-08-30
CVE-2022-45366 WordPress Slimstat Analytics Plugin <= 5.0.4 is vulnerable to Cross Site Scripting (XSS) CWE-79 7.1 High2023-05-25
CVE-2023-0630 Slimstat Analytics < 4.9.3.3 - Subscriber+ SQL Injection 8.8 -2023-03-20
CVE-2022-4310 Slimstat Analytics < 4.9.3 - Unauthenticated Stored XSS 6.1 -2023-01-09

All 20 known CVE vulnerabilities affecting Slimstat Analytics with full Chinese analysis, references, and POCs where available.