Ice00

3 CVEs in 1 Ice00 product, including Newstatpress. Newest: CVE-2026-101924 (2026-10-14). Severity, EPSS and public exploits for each.

Ice00 products with known CVEs

ProductCVEs
Newstatpress3
Ice00 CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-101924High7.22026-10-14The NewStatPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 1.4.5 via the 'Last referrers' meta box on…
CVE-2026-100153High7.22026-10-14The NewStatPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'QUERY_STRING / REQUEST_URI' parameter in all versions up to, and in…
CVE-2025-13747Medium6.42025-12-12The NewStatPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via a regex bypass in nsp_shortcode function in all versions up to, and incl…