VeronaLabs · weakness class
SQL Injection
10 CVEs
Out of date: the sync last ran 5 hours ago. Newer CVEs and scores may be missing from the map.
Every dot is a CVE in what this vendor ships; the named ones are the most at risk.
- check available
- 1
- likely to be exploited
- 2
Every one of the 10 is a mark on the map. Named now: 1 to 10, most at risk first.
- WordPress Statistics <13.0.8 - Blind SQL Injection
- WP Statistics <= 13.1.4 Unauthenticated Blind SQL Injection via exclusion_reason
- WP Statistics < 13.2.9 - Authenticated SQLi
- Slimstat Analytics <= 5.0.9 - Authenticated (Contributor+) Blind SQL Injection via Shortcode
- WP Statistics < 14.0 - Authenticated SQLi
- WordPress WP Statistics Plugin <= 13.2.10 is vulnerable to SQL Injection
- WP SMS <= 6.5 - Authenticated (Admin+) SQL Injection to Reflected Cross-Site Scripting
- WordPress WP SMS plugin <= 6.9.12 - SQL Injection vulnerability
- WordPress Slimstat Analytics plugin <= 5.4.11 - SQL Injection vulnerability
- SlimStat Analytics <= 5.3.1 - Authenticated (Subscriber+) SQL Injection via `args` Parameter
exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.