CVEs we hold for Veronalabs
Records whose assigning authority named Veronalabs as the affected vendor. Newest identifiers first, capped at 200.
CVE-2026-84774WordPress WP Statistics plugin <= 14.16.11 - Cross Site Scripting (XSS) vulnerabilityVeronaLabs WP Statistics
CVE-2026-7634SlimStat Analytics <= 5.4.11 - Unauthenticated Stored Cross-Site Scripting via User-Agent Headerveronalabs SlimStat Analytics
CVE-2026-54818WordPress Slimstat Analytics plugin <= 5.4.11 - SQL Injection vulnerabilityVeronaLabs Slimstat Analytics
CVE-2026-5231WP Statistics <= 14.16.4 - Unauthenticated Stored Cross-Site Scripting via 'utm_source' Parameterveronalabs WP Statistics – Simple, privacy-friendly Google…
CVE-2026-48839WordPress WP Statistics plugin <= 14.16.6 - Cross Site Scripting (XSS) vulnerabilityVeronaLabs WP Statistics
CVE-2026-40790WordPress WP SMS plugin <= 7.2.1 - Sensitive Data Exposure vulnerabilityVeronaLabs WP SMS
CVE-2026-3488WP Statistics <= 14.16.4 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure and…veronalabs WP Statistics – Simple, privacy-friendly Google…
CVE-2026-27410WordPress Slimstat Analytics plugin < 5.4.0 - Deserialization of untrusted data vulnerabilityVeronaLabs Slimstat Analytics
CVE-2026-25343WordPress WP SMS plugin <= 7.1 - Cross Site Scripting (XSS) vulnerabilityVeronaLabs WP SMS
CVE-2026-15780WP Statistics <= 14.16.8 - Unauthenticated Stored Cross-Site Scripting via 'utm_campaign' Parameterveronalabs WP Statistics – Simple, privacy-friendly Google…
CVE-2026-1238SlimStat Analytics <= 5.3.5 - Unauthenticated Stored Cross-Site Scripting via 'fh'veronalabs SlimStat Analytics
CVE-2025-9816WP Statistics <= 14.5.4 - Unauthenticated Stored Cross-Site Scripting via User-Agent Headerveronalabs WP Statistics – Simple, privacy-friendly Google…
CVE-2025-69323WordPress Slimstat Analytics plugin <= 5.3.2 - Reflected Cross Site Scripting (XSS) vulnerabilityVeronaLabs Slimstat Analytics
CVE-2025-62006WordPress WP SMS plugin <= 7.0.1 - Broken Access Control vulnerabilityVeronaLabs WP SMS
CVE-2025-55716WordPress WP Statistics Plugin <= 14.15 - Broken Access Control VulnerabilityVeronaLabs WP Statistics
CVE-2025-3953WP Statistics – The Most Popular Privacy-Friendly Analytics Plugin <= 14.13.3 - Missing Authorization to Authenticated…veronalabs WP Statistics – Simple, privacy-friendly Google…
CVE-2025-15057SlimStat Analytics <= 5.3.3 - Unauthenticated Stored Cross-Site Scripting via 'fh' Parameterveronalabs SlimStat Analytics
CVE-2025-15055SlimStat Analytics <= 5.3.4 - Unauthenticated Stored Cross-Site Scripting via 'notes/resource' Parametersveronalabs SlimStat Analytics
CVE-2025-14151SlimStat Analytics <= 5.3.2 - Unauthenticated Stored Cross-Site Scriptingveronalabs SlimStat Analytics
CVE-2025-13431SlimStat Analytics <= 5.3.1 - Authenticated (Subscriber+) SQL Injection via `args` Parameterveronalabs SlimStat Analytics
CVE-2024-9548Slimstat Analytics <= 5.2.6 - Unauthenticated Stored Cross-Site Scriptingveronalabs SlimStat Analytics
CVE-2024-43331WordPress WP SMS plugin <= 6.9.3 - Broken Access Control vulnerabilityVeronaLabs WP SMS
CVE-2024-34811WordPress WP SMS plugin <= 6.5.1 - Cross Site Scripting (XSS) vulnerabilityVeronaLabs WP SMS
CVE-2024-30454WordPress WP SMS plugin <= 6.6.2 - Cross Site Request Forgery (CSRF) vulnerabilityVeronaLabs WP SMS
CVE-2024-25920WordPress WP SMS plugin <= 6.3.4 - Cross Site Scripting (XSS) vulnerabilityVeronaLabs WP SMS
CVE-2024-24881WordPress WP SMS Plugin <= 6.5.2 is vulnerable to Cross Site Scripting (XSS)VeronaLabs WP SMS – Messaging & SMS Notification for…
CVE-2024-2194WP Statistics <= 14.5 - Unauthenticated Stored Cross-Site Scriptingveronalabs WP Statistics – Simple, privacy-friendly Google…
CVE-2024-1073SlimStat Analytics <= 5.1.3 - Authenticated (Subscriber+) Stored Cross-Site Scriptingveronalabs SlimStat Analytics
CVE-2023-6981WP SMS <= 6.5 - Authenticated (Admin+) SQL Injection to Reflected Cross-Site Scriptingveronalabs WSMS (formerly WP SMS) – SMS & MMS Notifications…
CVE-2023-6980WP SMS <= 6.5 - Cross-Site Request Forgery to Subscriber Deletionveronalabs WSMS (formerly WP SMS) – SMS & MMS Notifications…
CVE-2023-4598Slimstat Analytics <= 5.0.9 - Authenticated (Contributor+) Blind SQL Injection via Shortcodeveronalabs SlimStat Analytics
CVE-2023-4597Slimstat Analytics <= 5.0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodeveronalabs SlimStat Analytics
CVE-2023-33994WordPress Slimstat Analytics plugin <= 5.0.5.1 - Broken Access Control vulnerabilityVeronaLabs Slimstat Analytics
CVE-2023-32742WordPress WP SMS Plugin <= 6.1.4 is vulnerable to Cross Site Scripting (XSS)VeronaLabs WP SMS
CVE-2023-27447WordPress WP SMS Plugin <= 6.0.4 is vulnerable to Sensitive Data ExposureVeronaLabs WP SMS – Messaging & SMS Notification for…
CVE-2022-38074WordPress WP Statistics Plugin <= 13.2.10 is vulnerable to SQL InjectionVeronaLabs WP Statistics
CVE-2022-0513WP Statistics <= 13.1.4 Unauthenticated Blind SQL Injection via exclusion_reasonVeronaLabs WP Statistics
CVE-2021-4333WP Statistics <= 13.1.1 - Cross-Site Request Forgery to Arbitrary Plugin Activation and Deactivationveronalabs WP Statistics – Simple, privacy-friendly Google…
41 records, read from the index as it stood on 20 Sep 2026. Every row opens the record it names, and every value on that record opens its own receipt.
Everything on this page is free. Public data. Withholding it protects nothing.