Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

WP Visitor Statistics (Real Time Traffic) — Vulnerabilities & Security Advisories 13

All 13 CVE vulnerabilities found in WP Visitor Statistics (Real Time Traffic), with AI-generated Chinese analysis, references, and POCs.

The vulnerability aggregation page for WP Visitor Statistics (Real Time Traffic) is a resource dedicated to tracking security weaknesses associated with this specific WordPress plugin. This page compiles known vulnerabilities affecting the software, focusing primarily on Common Weakness Enumerations such as Cross-Site Scripting, Unrestricted File Upload, and SQL Injection that have been disclosed or identified in the wild. The collection covers security issues reported over the past several years, including both historically significant patches and more recent advisory disclosures. By visiting this page, researchers and administrators can track a vendor’s historical advisories to understand their remediation patterns and response times. Users can also gain a deeper understanding of specific weakness classes that frequently impact this type of statistical tracking tool, helping to identify common implementation flaws. Additionally, the page allows for looking up a product's vulnerability history, providing a chronological view of how the plugin has evolved in response to security threats. This comprehensive overview supports informed decision-making for site owners evaluating the plugin's long-term security posture or for security professionals auditing similar third-party WordPress extensions. The information presented here is aggregated from various public sources to provide a centralized reference for those monitoring the safety of their WordPress environments.

Vendor: Unknown

CVE IDTitleCVSSSeverityPublished
CVE-2026-4303 WP Visitor Statistics (Real Time Traffic) <= 8.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'height' Shortcode Attribute CWE-79 6.4 Medium2026-04-08
CVE-2025-67983 WordPress WP Visitor Statistics (Real Time Traffic) plugin <= 8.3 - Cross Site Scripting (XSS) vulnerability CWE-79 6.5 Medium2025-12-16
CVE-2025-49400 WordPress WP Visitor Statistics (Real Time Traffic) Plugin <= 8.2 - Cross Site Scripting (XSS) Vulnerability CWE-79 9.8 Critical2025-08-20
CVE-2025-53566 WordPress WP Visitor Statistics (Real Time Traffic) plugin <= 7.8 - Cross Site Scripting (XSS) Vulnerability CWE-79 6.5 Medium2025-07-04
CVE-2025-49996 WordPress WP Visitor Statistics (Real Time Traffic) plugin <= 8.4 - Broken Access Control vulnerability CWE-862 5.3 Medium2025-06-20
CVE-2025-24675 WordPress WP Visitor Statistics (Real Time Traffic) plugin <= 7.2 - Cross Site Scripting (XSS) vulnerability CWE-79 6.5 Medium2025-01-24
CVE-2025-22304 WordPress WP Visitor Statistics plugin <= 7.5 - Broken Access Control vulnerability CWE-862 4.3 Medium2025-01-07
CVE-2024-24867 WordPress WP Stats Manager plugin <= 6.9.4 - Sensitive Data Exposure vulnerability CWE-200 5.3 Medium2024-03-17
CVE-2023-0600 WP Visitor Statistics (Real Time Traffic) < 6.9 - Unauthenticated SQLi 9.8 -2023-05-15
CVE-2022-4656 WP Visitor Statistics (Real Time Traffic) < 6.5 - Contributor+ Stored XSS via Shortcode 5.4 -2023-02-13
CVE-2022-0410 WP Visitor Statistics (Real Time Traffic) < 5.6 - Subscriber+ SQL Injection CWE-89 8.8 -2022-03-07
CVE-2021-25042 WP Visitor Statistics (Real Time Traffic) < 5.5 - Arbitrary IP Address Exclusion to Stored XSS CWE-862 5.4 -2022-02-28
CVE-2021-24750 WP Visitor Statistics (Real Time Traffic) < 4.8 - Subscriber+ SQL Injection CWE-89 8.8 -2021-12-21

All 13 known CVE vulnerabilities affecting WP Visitor Statistics (Real Time Traffic) with full Chinese analysis, references, and POCs where available.