CVE-2026-5231 | veronalabs WP Statistics Plugin up to 14.16.4 on WordPress utm_source cross site scripting

April 17, 2026 Yanac

A vulnerability categorized as problematic has been discovered in veronalabs WP Statistics Plugin up to 14.16.4 on WordPress. Affected by this issue is some unknown functionality. Such manipulation of the argument utm_source leads to cross site scripting.

This vulnerability is traded as CVE-2026-5231. The attack may be launched remotely. There is no exploit available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More