CVE-2026-54818: WordPress Slimstat Analytics plugin <= 5.4.11 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in VeronaLabs Slimstat Analytics allows Blind SQL Injection.
This issue affects Slimstat Analytics: from n/a through 5.4.11.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WordPress Slimstat Analytics Pluginto a version that resolves this vulnerability.Fixed in 5.4.12
Event History
Frequently Asked Questions
What is the severity of CVE-2026-54818?
The severity of CVE-2026-54818 is rated high with a score of 8.5.
What is the nature of CVE-2026-54818?
CVE-2026-54818 is a SQL Injection vulnerability that allows for Blind SQL Injection in the WordPress Slimstat Analytics plugin.
Which versions of Slimstat Analytics are affected by CVE-2026-54818?
CVE-2026-54818 affects Slimstat Analytics versions up to and including 5.4.11.
How do I fix CVE-2026-54818?
You can fix CVE-2026-54818 by updating the Slimstat Analytics plugin to the latest version beyond 5.4.11.
What consequences can arise from CVE-2026-54818?
CVE-2026-54818 can lead to unauthorized data access or manipulation due to the SQL Injection vulnerability.