getusedtoit vulnerabilities

Products

• wp slimstat 2

Latest getusedtoit CVEs

Newest publication first

1. CVE-2015-1204 Slimstat Analytics <= 3.9.2 - Cross-Site Scripting

   Published 2015-01-21

   Medium·CVSS 4.3 EPSS 2.3%

   Cross-site scripting (XSS) vulnerability in the Save Filters functionality in the WP Slimstat plugin before 3.9.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the fs[resource] parameter in the wp-slim-view-2 page to wp-admin/admin.php.

2. CVE-2014-100027 Slimstat Analytics <= 3.5.5 - Stored Cross-Site Scripting

   Published 2015-01-13

   Medium·CVSS 4.3 EPSS 2.0%

   Cross-site scripting (XSS) vulnerability in the WP SlimStat plugin before 3.5.6 for WordPress allows remote attackers to inject arbitrary web script or HTML via a crafted URL.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.