Vulnerabilities / Slimstat Analytics
Slimstat Analytics vulnerabilities
Advisories WPSec published for SlimStat Analytics. Other sources may list more. Its attack surface: Slimstat Analytics on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-27 | WPSEC-2026-1708 | Slimstat Analytics <= 5.5.0 - Authenticated (Contributor+) Sensitive Information Exposure via Shortcodes | Medium 4.3 | 6.0.0 |
| 2026-10-27 | WPSEC-2026-1707 | Slimstat Analytics <= 5.5.0 - Authenticated (Delegated Settings Access) Missing Authorization to Analytics Data Deletion and Settings Reset | Medium 5.9 | 6.0.0 |
| 2026-10-27 | WPSEC-2026-1706 | Slimstat Analytics <= 5.5.0 - Authenticated (Subscriber+) SQL Injection via 'Posts and Pages' Report Column | Medium 5.3 | 6.0.0 |
License: CC BY 4.0