WordSec
WordSec

StatCounter – Free Real Time Visitor Stats

Explore StatCounter – Free Real Time Visitor Stats vulnerabilities across all versions. Currently tracking 4 known vulnerabilities, including severity, impact, and patch status.

01234567891011.02.2008Today26.01.20224.8StatCounter <= 2.0.6 - Admin+ Stored Cross-Site Scripting CVSS 4.8 · 26.01.202218.02.20266.4Official StatCounter Plugin <= 2.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Nickname CVSS 6.4 · 18.02.202628.05.20266.4StatCounter <= 2.1.1 - Authenticated (Author+) Stored Cross-Site Scripting via Author Nickname CVSS 6.4 · 28.05.202626.06.20266.4StatCounter – Free Real Time Visitor Stats <= 2.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting CVSS 6.4 · 26.06.2026

Strategic Overview

Avg CVSSMedium
6.0/ 10
Patch Coverage100%
Open

0

Fixed

4

Get automatic notifications for all StatCounter – Free Real Time Visitor Stats vulnerabilities before they are exploited.

Vulnerability Records

4 records
Showing 1–4 of 4 reports
Plugin Profile
Latestv2.1.2

StatCounter &#8211; Free Real Time Visitor Stats

StatCounter

Author

StatCounter

4.0(47)
80/100
Last Updated
2026-05-25 (2mo ago)
Active Installs
70,000+
Downloads
2,046,679
Requires WP
2.0.2+
Requires PHP
0+
Tested up to
WP 7.0.2
Created
2008-02-11 (19y ago)

The Official StatCounter WordPress Plugin brings you all the powerful StatCounter features to your wordpress blog. Including but not limited to the following: Invisible Counter Option Configurable Counter Configurable Summary Stats Magnify User Drill Down Popular Pages Entry Pages Exit Pages Came From Keyword Analysis Recent Keyword Activity Search Engine Wars Visitor Paths Visit Length Returning Visits Recent Pageload Activity Recent Visitor Activity Country/State/City Stats Recent Visitor Google Map ISP Stats Browser Stats O.S. Stats Resolution Stats JavaScript Stats Email Reports Multiple Site Management User Access Management Public Stats Blocking Cookie

View on WordPress.org

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C