Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 29
Reset filtersSlimStat Analytics <= 5.4.11 - Authenticated (Subscriber+) SQL Injection
SlimStat Analytics < 5.4.0 - Unauthenticated PHP Object Injection
SlimStat Analytics <= 5.4.11 - Unauthenticated Stored Cross-Site Scripting via User-Agent Header
SlimStat Analytics <= 5.3.5 - Unauthenticated Stored Cross-Site Scripting via 'fh'
SlimStat Analytics <= 5.3.1 - Authenticated (Subscriber+) SQL Injection via `args` Parameter
Slimstat Analytics <= 5.3.2 - Reflected Cross-Site Scripting
SlimStat Analytics <= 5.3.3 - Unauthenticated Stored Cross-Site Scripting via 'fh' Parameter
SlimStat Analytics <= 5.3.4 - Unauthenticated Stored Cross-Site Scripting via 'notes/resource' Parameters
SlimStat Analytics <= 5.3.2 - Unauthenticated Stored Cross-Site Scripting
Slimstat Analytics <= 5.2.6 - Unauthenticated Stored Cross-Site Scripting
SlimStat Analytics <= 5.1.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slimstat Analytics <= 5.0.9 - Authenticated (Contributor+) Blind SQL Injection via Shortcode
Slimstat Analytics <= 5.0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slimstat Analytics <= 5.0.5.1 - Missing Authorization via delete_pageview
Slimstat Analytics <= 5.0.8 - Authenticated (Administrator+) Stored Cross-Site Scripting via settings
Slimstat Analytics <= 5.0.4 - Reflected Cross-Site Scripting
Slimstat Analytics <= 5.0.4 - Authenticated (Administrator+) SQL Injection
Slimstat Analytics <= 4.9.3.3 - Authenticated (Subscriber+) SQL Injection via Shortcode
Slimstat Analytics <= 4.9.3.2 - Authenticated (Subscriber+) SQL Injection via Shortcode
Slimstat Analytics <= 4.9.2 - Unauthenticated Stored Cross-Site Scripting
Slimstat Analytics <= 4.9.2 - Reflected Cross-Site Scripting via REQUEST_URI
Slimstat Analytics <= 4.8.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
WP Slimstat <= 4.8 - Unauthenticated Stored Cross-Site Scripting from Visitors
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.