CVE-2019-12566

MEDIUM 5.4CVE-2019-12566 · Published 03/06/2019 · updated 17/06/2026

In short

CVE-2019-12566 is a MEDIUM (CVSS 5.4) vulnerability affecting wp statistics (veronalabs).
Chance of exploitation in the next 30 days (EPSS): 1.1%, higher than 65.3% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
wp statistics veronalabs	`≤ 12.6.5`	No fix yet

Description

The WP Statistics plugin through 12.6.5 for Wordpress has stored XSS in includes/class-wp-statistics-pages.php. This is related to an account with the Editor role creating a post with a title that contains JavaScript, to attack an admin user.

References

wp-statistics/wp-statistics commit aec4359 · Patch
wp-statistics/wp-statistics · Exploit
wordpress.org/plugins/wp-statistics · Product

More vulnerabilities in wp statistics

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

wp statistics

veronalabs

≤ 12.6.5

No fix yet

More vulnerabilities in wp statistics

See all →