Hk1993 Wp Online Users Stats — known CVE vulnerabilities

Every CVE whose affected-product data names Hk1993 Wp Online Users Stats, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2025-4966 — CVSS 6.1 (medium): The WP Online Users Stats plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.0…
• CVE-2025-4964 — CVSS 4.9 (medium): The WP Online Users Stats plugin for WordPress is vulnerable to time-based SQL Injection via the ‘table_name’ parameter in all versions…