Just Writing Statistics
Just Writing Statistics has 3 disclosed vulnerabilities in the WordSec catalog, reported between 2024 and 2025; all 3 are fixed as of September 2026. Their average CVSS score is 4.5, and the most serious one scores 4.9 out of 10. 2024 was the busiest year with 2 disclosures.
The most common weakness is Cross-Site Scripting, behind 1 of the records (33%). Other recurring categories include Missing Authorization, SQL Injection.
Every one of the 3 issues recorded for Just Writing Statistics has a vendor fix available, so running the current release closes all known holes.
3 independent researchers contributed these findings, one record each. Just Writing Statistics is installed on roughly 1,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.7.7.
CVE-2024-56250Just Writing Statistics <= 4.7 - Authenticated (Administrator+) SQL Injection
Read the full analysisVulnerability Records
Just Writing Statistics
Author
Greg Ross
Just Writing Statistics is a fork of WP Word Count Just Writing Statistics tells you exactly how many words you’ve written on your site with statistics by: Top Content All Content Month Year Author Tags Categories Frequency (new!) Just Writing Statistics also has reading times for each post and page of your site. Find out how many hours of content you’ve written or let readers know how long your articles are. You can include reading time at the top of each of your posts automatically or use a shortcode. Features Quickly see how many posts and pages you’ve created and how many total words they add up to. View and display estimated reading times for each piece of content on your site. Support for custom post types so you can monitor word counts from content created by your themes and plugins. View your writing output for each month broken down by post type. See all of your site author’s word counts with breakdowns by post type.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C