CVE-2026-54818
published 2026-06-17CVE-2026-54818: WordPress Slimstat Analytics plugin <= 5.4.11 - SQL Injection vulnerability Improper Neutralization of Special Elements used in an SQL Command ('SQL…
high8.5CVSS 3.1
AVNACLPRLUINSCCHINAL
EPSS
0.21%
11.3th percentile
WordPress Slimstat Analytics plugin <= 5.4.11 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in VeronaLabs Slimstat Analytics allows Blind SQL Injection.
This issue affects Slimstat Analytics: from n/a through 5.4.11.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| veronalabs | slimstat_analytics | n/a – 5.4.11 | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in VeronaLabs Slimstat Analytics allows Blind SQL Injection.
ghsa_unreviewed·2026-06-17
CVE-2026-54818 [HIGH] CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in VeronaLabs Slimstat Analytics allows Blind SQL Injection.
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in VeronaLabs Slimstat Analytics allows Blind SQL Injection.
This issue affects Slimstat Analytics: from n/a through 5.4.11.
VulDB
VeronaLabs Slimstat Analytics Plugin up to 5.4.11 on WordPress sql injection
vuldb·2026-06-17
CVE-2026-54818 [CRITICAL] VeronaLabs Slimstat Analytics Plugin up to 5.4.11 on WordPress sql injection
A vulnerability described as critical has been identified in VeronaLabs Slimstat Analytics Plugin up to 5.4.11 on WordPress. The affected element is an unknown function. The manipulation results in sql injection.
This vulnerability was named CVE-2026-54818. The attack may be performed from remote. There is no available exploit.
CVEList
WordPress Slimstat Analytics plugin <= 5.4.11 - SQL Injection vulnerability
cvelistv5·2026-06-17·CVSS 8.5
CVE-2026-54818 [HIGH] CWE-89 WordPress Slimstat Analytics plugin <= 5.4.11 - SQL Injection vulnerability
WordPress Slimstat Analytics plugin <= 5.4.11 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in VeronaLabs Slimstat Analytics allows Blind SQL Injection.
This issue affects Slimstat Analytics: from n/a through 5.4.11.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2026-06-17
Published