Vendor

WP Statistics

1 brief RSS

WP Statistics Plugin Stored XSS Vulnerability (CVE-2026-5231)

The WP Statistics WordPress plugin is vulnerable to stored cross-site scripting (XSS) via the 'utm_source' parameter, allowing unauthenticated attackers to inject arbitrary web scripts into admin pages.

WP Statistics wordpress xss cve-2026-5231 wp-statistics

2r 1t 1c Jan 26, 2024