Known vulnerabilities in Visitor Traffic Real Time Statistics

This plugin will help you to track your visitors, browsers, operating systems, visits and much more in one dashboard page.

7Reported vulnerabilities

8.8Highest CVSS score

8.13Latest version

30,000+Active installs

What to do now

Update Visitor Traffic Real Time Statistics to 8.12 or later. 7 of these have a fixed version available. Updating resolves them.

Plugin last updated: August 1, 2026 / Tested up to WordPress: 7.0.4 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVE	Severity	Exploit probability next 30 days	Affected versions	Fixed in	Published
CVE-2019-15832	High 8.8	0.8%	Before 1.13	`1.13`	August 30, 2019
CVE-2019-15831	High 8.8	0.7%	Before 1.12	`1.12`	August 30, 2019
WF-ea4e9263-36f7-490c-9dad-d3b806bcfdf4	High 8.8	—	2.13 and earlier	`3.1`	April 22, 2021
CVE-2026-2936	High 7.2	0.3%	0 to 8.4 (inclusive)	`8.5`	April 4, 2026
CVE-2026-28175	High 7.2	0.2%	8.11 and earlier	`8.12`	August 13, 2026
CVE-2023-47557	Medium 4.3	0.4%	7.2 and earlier	`7.3`	November 7, 2023
WF-c7ab5a00-ce1c-4d74-9192-c9834e2d702d	Medium 4.3	—	Before 6.8	`6.9`	June 5, 2023

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.