wp_visitor_statistics_real_time_traffic vulnerabilities
CVEs whose affected-version data names the wp_visitor_statistics_real_time_traffic package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-116609Medium· 6.5WP Visitor Statistics (Real Time Traffic) <= 8.8 - Authenticated (Contributor+) SQL Injection via 'from' Shortcode Attribute
The WP Visitor Statistics (Real Time Traffic) plugin for WordPress is vulnerable to SQL Injection via the 'from' (and sibling 'to'/'first'/'second') shortcode attribute of the [wsm_showTrafficStatsList] shortcode in versions up to, and i…
▾ Sunlitosamaesh · WP Visitor Statistics (Real Time Traffic)EPSS 0.34%via CVEORG
CVE-2026-96267High· 7.5The WP Visitor Statistics (Real Time Traffic) plugin for WordPress is vulnerable to generic SQL Injection via the 'fullRef' parameter in all versions up to, and including, 8.7 due to insufficient escaping on the user supplied parameter a…
The WP Visitor Statistics (Real Time Traffic) plugin for WordPress is vulnerable to generic SQL Injection via the 'fullRef' parameter in all versions up to, and including, 8.7 due to insufficient escaping on the user supplied parameter a…
▾ Twilightosamaesh · WP Visitor Statistics (Real Time Traffic)EPSS 0.33%via NVD