CVE-2026-15780 | Veronalabs WP Statistics Plugin up to 14.16.8 on WordPress REST Endpoint /wp-statistics/v2/hit utm_campaign cross site scripting

August 19, 2026 Yanac

A vulnerability was found in Veronalabs WP Statistics Plugin up to 14.16.8 on WordPress and classified as problematic. This impacts an unknown function of the file /wp-statistics/v2/hit of the component REST Endpoint. Such manipulation of the argument utm_campaign leads to cross site scripting.

This vulnerability is traded as CVE-2026-15780. The attack may be launched remotely. There is no exploit available.VulDB Recent EntriesRead More