Security WordPress NewStatPress 0.9.8 Cross Site Scripting / SQL Injection May 25, 2015 007admin Leave a comment WordPress NewStatPress plugin version 0.9.8 suffers from cross site scripting and remote SQL injection vulnerabilities.