Read the docs

Advanced Page Visit Counter Project

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Advanced Page Visit Counter Project records in CISA KEV

No Advanced Page Visit Counter Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Advanced Page Visit Counter 2 records MEDIUM

Records

2 records

TI-2021-07236 CVE-2021-24957 · GHSA-qgmf-6jwp-mj2x

Advanced Page Visit Counter < 6.1.6 - Subscriber+ Blind SQL injection

Priority MEDIUM 41

The Advanced Page Visit Counter WordPress plugin before 6.1.6 does not escape the artID parameter before using it in a SQL statement in the apvc_reset_count_art AJAX action, available to any authenticated user, leading t…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01345 Published 2022-04-25 Fixed in 6.1.6 CWE-89
TI-2021-07364 CVE-2021-25086 · GHSA-3hhv-jmm7-4v3q

Advanced Page Visit Counter < 6.1.2 - Unauthenticated Stored Cross-Site Scripting

Priority LOW 30

The Advanced Page Visit Counter WordPress plugin before 6.1.2 does not sanitise and escape some input before outputting it in an admin dashboard page, allowing unauthenticated attackers to perform Cross-Site Scripting at…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01322 Published 2022-05-02 Fixed in 6.1.2 CWE-79
Open these records in search →