osamaesh has 2 CVEs on record. 2 were published in the last 90 days. The median CVSS is 7.0 (high).

CVEs per month

Last 12 months, by publish date

1125/111225/120126/010226/020326/030426/040526/050626/060726/070826/080926/091026/10

Exploited share: 0% vs 1% corpus
Median CVSS: 7.0
Publish → KEV: —
Last 90 days: 2 prev 0

Weakness classes

CWE-89 2

Products

WP Visitor Statistics (Real Time Traffic) 2

Follow osamaesh:RSS feed Save a search →Embed badge ↗

Total CVEs

Critical

CISA KEV

Exploited

Worst active — by depth score

osamaesh vulnerabilities

CVEs affecting osamaesh, newest first. Open any entry for full detail, references, and exploit status.

2 CVEsRSS

CVE-2026-116609Medium· 6.5

2d ago

WP Visitor Statistics (Real Time Traffic) <= 8.8 - Authenticated (Contributor+) SQL Injection via 'from' Shortcode Attribute

The WP Visitor Statistics (Real Time Traffic) plugin for WordPress is vulnerable to SQL Injection via the 'from' (and sibling 'to'/'first'/'second') shortcode attribute of the [wsm_showTrafficStatsList] shortcode in versions up to, and i…

▾ Sunlitosamaesh · WP Visitor Statistics (Real Time Traffic)via CVEORG

CVE-2026-96267High· 7.5

3w ago

The WP Visitor Statistics (Real Time Traffic) plugin for WordPress is vulnerable to generic SQL Injection via the 'fullRef' parameter in all versions up to, and including, 8.7 due to insufficient escaping on the user supplied parameter a…

The WP Visitor Statistics (Real Time Traffic) plugin for WordPress is vulnerable to generic SQL Injection via the 'fullRef' parameter in all versions up to, and including, 8.7 due to insufficient escaping on the user supplied parameter a…

▾ Twilightosamaesh · WP Visitor Statistics (Real Time Traffic)EPSS 0.33%via NVD