WP Vulnerability WatchVulnerability data as of September 7, 2026

Known vulnerabilities in NewStatPress

NewStatPress (Statpress plugin fork) is a real-time plugin to manage the visits' statistics about your blog (without external web analytics).

11Reported vulnerabilities
9.8Highest CVSS score
1.4.5Latest version
8,000+Active installs

What to do now

Update NewStatPress to 1.4.5 or later. 11 of these have a fixed version available. Updating resolves them.

Plugin last updated: July 7, 2026 / Tested up to WordPress: 6.9.7 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVESeverityExploit probability
next 30 days		 Affected versionsFixed inPublished
CVE-2015-4062 Medium 6.5 9.2% 0.9.8 and earlier 0.9.9 May 27, 2015
CVE-2022-0206 Medium 6.1 1.5% Before 1.3.6 1.3.6 February 14, 2022
CVE-2015-9315 Critical 9.8 1.8% Before 1.0.1 1.0.1 August 14, 2019
CVE-2015-9313 Critical 9.8 1.8% Before 1.0.5 1.0.5 August 14, 2019
CVE-2015-4063 Low 3.5 6.2% 0.9.8 and earlier 0.9.9 May 27, 2015
CVE-2026-14845 High 7.2 0.2% Before 1.4.5 1.4.5 August 4, 2026
CVE-2015-9312 Medium 6.1 1.8% Before 1.0.5 1.0.5 August 14, 2019
CVE-2025-13747 Medium 6.4 0.2% 0 to 1.4.3 (inclusive) 1.4.4 December 12, 2025
CVE-2017-18575 Medium 6.1 0.9% Before 1.2.5 1.2.5 August 22, 2019
CVE-2015-9314 Medium 6.1 0.9% Before 1.0.4 1.0.4 August 14, 2019
CVE-2015-9311 Medium 6.1 0.9% Before 1.0.6 1.0.6 August 14, 2019

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.