CVE-2026-54818highCWE-89

CVE-2026-54818: falha de alta gravidade em VeronaLabs Slimstat Analytics

WordPress Slimstat Analytics plugin <= 5.4.11 - SQL Injection vulnerability

Publicada em

Seguir esta CVE+ Monitorar SlimStat Analytics

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 8.5epss 0.3%
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in VeronaLabs Slimstat Analytics allows Blind SQL Injection. This issue affects Slimstat Analytics: from n/a through 5.4.11.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L
Produtos afetados
VeronaLabs · Slimstat Analytics
CVEs relacionadas — VeronaLabs Slimstat Analytics

No mesmo produto, das mais perigosas para as menos.

CVE-2023-33994MEDIUMWordPress Slimstat Analytics plugin <= 5.0.5.1 - Broken Access Control vulnerabilityEPSS 0.6%CVE-2026-27410MEDIUMWordPress Slimstat Analytics plugin < 5.4.0 - Deserialization of untrusted data vulnerabilityEPSS 0.3%CVE-2025-69323HIGHWordPress Slimstat Analytics plugin <= 5.3.2 - Reflected Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%