CVE-2025-14151

Name of the Vulnerable Software and Affected Versions SlimStat Analytics plugin for WordPress versions prior to 5.3.3

Description The SlimStat Analytics plugin for WordPress is susceptible to Stored Cross-Site Scripting. This is caused by inadequate input sanitization and output escaping of user-provided attributes. An unauthenticated attacker can inject arbitrary web scripts via the outbound resource parameter in the 'slimtrack' AJAX action. When a user accesses an injected page, the malicious script will execute.

Recommendations Update the SlimStat Analytics plugin to version 5.3.3 or later.