Read the docs

Page Visit Counter

Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Page Visit Counter records in CISA KEV

No Page Visit Counter vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Advanced Page Visit Counter 4 records MEDIUM

Records

5 records

TI-2023-05087 CVE-2023-5529 · GHSA-23vm-fxf4-h89x

Advanced Page Visit Counter <= 8.0.6 - Admin+ Stored XSS

Priority MEDIUM 55

The Advanced Page Visit Counter WordPress plugin before 8.0.6 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even wh…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00389 Published 2025-05-15 Fixed in 8.0.6 CWE-79
TI-2023-24122 CVE-2023-45074 · GHSA-393j-fpg3-h6c9

WordPress Advanced Page Visit Counter Plugin <= 7.1.1 is vulnerable to SQL Injection

Priority MEDIUM 44

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Page Visit Counter Advanced Page Visit Counter – Most Wanted Analytics Plugin for WordPress allows SQL Injection.This…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00685 Published 2023-11-06 No fix listed CWE-89
TI-2023-13298 CVE-2023-28788 · GHSA-j835-2p2c-7jvw

WordPress Advanced Page Visit Counter Plugin <= 6.4.2 is vulnerable to SQL Injection

Priority LOW 39

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Page Visit Counter Advanced Page Visit Counter – Most Wanted Analytics Plugin for WordPress.This issue affects Advance…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00727 Published 2023-12-20 No fix listed CWE-89
TI-2024-21175 CVE-2024-32098 · GHSA-7p4g-2jvw-v22q

WordPress Advanced Page Visit Counter plugin <= 8.0.6 - Auth. SQL Injection (SQLi) vulnerability

Priority LOW 34

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Page Visit Counter Advanced Page Visit Counter.This issue affects Advanced Page Visit Counter: from n/a through 8.0.6.

CVSS 3.1HIGH 7.6 Network High privileges No interaction EPSS 0.00515 Published 2024-04-15 No fix listed CWE-89
TI-2023-27557 CVE-2023-50371 · GHSA-hc3j-xxm8-9r6j

WordPress Advanced Page Visit Counter Plugin <= 8.0.6 is vulnerable to Cross Site Scripting (XSS)

Priority LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Page Visit Counter Advanced Page Visit Counter – Most Wanted Analytics Plugin for WordPress allows Stored XSS.This iss…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00368 Published 2023-12-14 No fix listed CWE-79
Open these records in search →