OCTOBER 7, 2026
Live Feed
Back to database
Case File

CVE-2026-97276

HIGH · CVSS 7.1 EPSS 0.15%

Source: NVD + CISA KEV + EPSS · Published 2026-10-04 · Last synced 2026-10-07

CyberRota Analysis

AI-Generated

The vulnerability in WP Statistics allows for reflected cross-site scripting (XSS), enabling attackers to inject malicious scripts into web pages viewed by users. This can lead to unauthorized actions or data theft, posing a significant risk to any site utilizing affected versions of the plugin. Organizations using WP Statistics, particularly those handling sensitive user data, should prioritize immediate remediation to mitigate potential exploitation.

CVE
CVE-2026-97276
Severity
HIGH
CVSS
7.1
EPSS
0.15%

Original NVD Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VeronaLabs WP Statistics wp-statistics allows Reflected XSS.This issue affects WP Statistics: from n/a through 14.16.14.