SecvalisbySYSDEVOPS.EU
CVE Catalog
EnglishPolski

CVE-2026-66426

HighCVSS 7.1
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.25%

16th percentile - higher than 16% of all known CVEs

Summary

Unauthenticated Cross Site Scripting (XSS) vulnerability in WP-Stats versions up to 2.56.

Risk Assessment

An attacker may inject malicious script that executes in the user's browser, potentially leading to session theft or account takeover.

Recommendation

Update the plugin to the latest version that includes a fix for the XSS vulnerability.

Other vulnerabilities in WP-Stats

Original NVD description (English source)

Unauthenticated Cross Site Scripting (XSS) in WP-Stats <= 2.56 versions.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS