Visitors Online by BestWebSoft
Visitors Online by BestWebSoft has 2 disclosed vulnerabilities in the WordSec catalog, reported between 2015 and 2017; all 2 are fixed as of September 2026. Their average CVSS score is 8.0, and the most serious one scores 9.8 out of 10. Severity breakdown: 1 critical and 0 high.
The most common weakness is Cross-Site Scripting, behind 1 of the records (50%). Other recurring categories include SQL Injection.
Every one of the 2 issues recorded for Visitors Online by BestWebSoft has a vendor fix available, so running the current release closes all known holes.
All of these findings were reported by Neven Birusk. Visitors Online by BestWebSoft is installed on roughly 1,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.8.8.
CVE-2015-9325Visitors Online by BestWebSoft <= 0.3 - SQL Injection
Read the full analysisVulnerability Records

Visitors Online by BestWebSoft
Author
bestweblayout
Visitors Online plugin is a helpful tool which displays your website visitors count on WordPress admin dashboard or as a widget in the front-end. Customize and manage your visitor statistic list, see how many visitors are on your website, and the highest level of visits. Start tracking your live traffic today! View Demo Free Features Automatically display visitor statistics on your dashboard Add visitor statistics to widgets Set the time when the visitor is considered being online without making any actions Customize the structure for data input Reset the statistics table Add custom code via plugin settings page Compatible with latest WordPress version Incredibly simple settings for fast setup without modifying code Detailed step-by-step documentation and videos Multilingual and RTL ready Pro Features All features from Free version included plus: Automatically download and update list of countries and IP addresses Display detailed user information Displays online users Get answer to your question within one business day (Support Policy) Upgrade to Pro Now If you have a feature suggestion or idea you’d like to see in the plugin, we’d love to hear about it! Suggest a Feature Documentation & Videos [Doc] User Guide [Doc] Installation [Doc] Purchase [Video] Installation Instruction Help & Support Visit our Help Center if you have any questions, our friendly Support Team is happy to help — https://support.bestwebsoft.com/ Translation Arabic (ar) (thanks to Said Moulla, www.SaidMoulla.com) Czech (cs_CZ) (thanks to PaMaDeSSoft, www.pamadessoft.cz) Italian (it_IT) (thanks to Dromar) Russian (ru_RU) Ukrainian (uk) Some of these translations are not complete. We are constantly adding new features which should be translated. If you would like to create your own language pack or update the existing one, you can send the text of PO and MO files to BestWebSoft and we’ll add it to the plugin. You can download the latest version of the program for work with PO and MO files Poedit. Recommended Plugins Updater – Automatically check and update WordPress website core with all installed plugins and themes to the latest versions.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C