Web-Stat
Web-Stat has one disclosed vulnerability in the WordSec catalog, all reported in 2021; it is fixed as of September 2026. Their average CVSS score is 7.5, and the most serious one scores 7.5 out of 10. Severity breakdown: 0 critical and 1 high.
The most common weakness is Exposure Of Sensitive Information To An Unauthorized Actor, behind 1 of the records (100%).
The one issue recorded for Web-Stat has a vendor fix available, so running the current release closes it.
All of these findings were reported by Ram. Web-Stat is installed on roughly 5,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.8.8.
CVE-2021-24167Web-Stat <= 1.4.0 - API Key Disclosure
Read the full analysisVulnerability Records

Web-Stat
Author
Web-Stat
Observe visitors interacting with your web site through real-time and intuitive reports! Web-Stat is FREE and records the details of all your visits. We detect everything that can be detected and present the results in clear, user-friendly charts and graphics. Check out the kind of info you can gain on your visitors with our demo stats. You can get the same type of data for your own site immediately: simply add the Web-Stat plugin. You can install Web-Stat in just two steps: click on ‘install’, click on ‘activate’, and you are done! Web-Stat will initialize automatically. Our stats are live, fast, easy to use and very accurate. We are currently serving 125,000 web sites. Plugin/ Theme Support This plugin works out of the box for all themes Localization English at https://www.web-stat.com French at https://www.web-stat.fr Spanish at https://es.web-stat.com Portuguese at https://pt.web-stat.com Italian at https://it.web-stat.com German at https://de.web-stat.com Turkish at https://tr.web-stat.com Russian at https://ru.web-stat.com Japanese at https://jp.web-stat.com Feedback We are hoping for your suggestions and feedback – Thank you for using or trying out our plugin! Drop us a line on our contact form Or follow us on our Facebook page
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C