Wp-statistics Wp Statistics — known CVE vulnerabilities

Every CVE whose affected-product data names Wp-statistics Wp Statistics, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2017-10991 — CVSS 6.1 (medium): The WP Statistics plugin through 12.0.9 for WordPress has XSS in the rangestart and rangeend parameters on the wps_referrers_page page.
• CVE-2017-2135 — CVSS 6.1 (medium): Cross-site scripting vulnerability in WP Statistics version 12.0.1 and earlier allows remote attackers to inject arbitrary web script or…
• CVE-2017-2147 — CVSS 6.1 (medium): Cross-site scripting vulnerability in WP Statistics version 12.0.4 and earlier allows remote attackers to inject arbitrary web script or…