Skip to content
Threat Feed
Subscribe

Vendor

WP Statistics

2 briefs RSS
high advisory

Stored Cross-Site Scripting in WP Statistics Plugin

An unauthenticated stored XSS vulnerability in the WP Statistics WordPress plugin allows attackers to inject malicious scripts via the utm_campaign parameter.

WP Statistics
1r 2t 1c
medium advisory

WP Statistics Plugin Stored XSS Vulnerability (CVE-2026-5231)

The WP Statistics WordPress plugin is vulnerable to stored cross-site scripting (XSS) via the 'utm_source' parameter, allowing unauthenticated attackers to inject arbitrary web scripts into admin pages.

WP Statistics wordpress xss cve-2026-5231 wp-statistics
2r 1t 1c