VeronaLabs
Vulnerability activity for VeronaLabs: what is being exploited, what was published lately, and when the next patch release is due.
Last 30 days
- CVEs
- 0
- Critical (CVSS 9+)
- 0
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Last 90 days
- CVEs
- 4
- Critical (CVSS 9+)
- 0
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Last 365 days
- CVEs
- 4
- Critical (CVSS 9+)
- 0
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Exploited now
None of this vendor's CVEs are on CISA's known-exploited list.
Recent
- 7.1HighOct 4, 2026VeronaLabs WP Statistics XSSCVE-2026-97276Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VeronaLabs WP Statistics wp-statistics allows Reflected XSS.This issue affects WP Statistics: from n/a through 14.16.14.
- 6.1MediumOct 2, 2026Veronalabs WP Statistics – Simple, privacy-friendly Google Analytics alternative XSSCVE-2026-97652The WP Statistics – Simple, privacy-friendly Google Analytics alternative plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via REQUEST_URI Query-Parameter Key in all versions up to, and including, 14.16.14 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.
- 7.1HighSep 30, 2026VeronaLabs WP Statistics XSSCVE-2026-93770Unauthenticated Cross Site Scripting (XSS) in WP Statistics <= 14.16.13 versions.
- 6.1MediumSep 3, 2026VeronaLabs WP Statistics XSSCVE-2026-84774Unauthenticated Cross Site Scripting (XSS) in WP Statistics <= 14.16.11 versions.
Top products
- WP Statistics3 CVEs in the last year
- WP Statistics – Simple, privacy-friendly Google Analytics alternative1 CVE in the last year
Counts cover CVEs and advisories Watch Floor tracks, by the date they became news. Updated every 10 minutes.