CVE-2013-3526: Wptrafficanalyzer Trafficanalyzer

Medium severity, CVSS 4.3. EPSS: 13.9% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in js/ta_loaded.js.php in the Traffic Analyzer plugin, possibly 3.3.2 and earlier, for WordPress allows remote attackers to inject arbitrary web script or HTML via the aoid parameter.

Affected products

• Wptrafficanalyzer Trafficanalyzer: version 1.0.0 only; version 1.1.0 only; version 1.1.1 only; version 1.1.2 only; version 1.1.3 only; version 1.2.0 only; …

Published 2013-05-10. Last modified 2026-06-16.