Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: Advanced Page Visit Counter Project Component: Advanced Page Visit Counter Clear all filters
TI-2021-07364 CVE-2021-25086 · GHSA-3hhv-jmm7-4v3q

Advanced Page Visit Counter < 6.1.2 - Unauthenticated Stored Cross-Site Scripting

Priority LOW 30

The Advanced Page Visit Counter WordPress plugin before 6.1.2 does not sanitise and escape some input before outputting it in an admin dashboard page, allowing unauthenticated attackers to perform Cross-Site Scripting at…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01322 Published 2022-05-02 Fixed in 6.1.2 CWE-79
TI-2021-07236 CVE-2021-24957 · GHSA-qgmf-6jwp-mj2x

Advanced Page Visit Counter < 6.1.6 - Subscriber+ Blind SQL injection

Priority MEDIUM 41

The Advanced Page Visit Counter WordPress plugin before 6.1.6 does not escape the artID parameter before using it in a SQL statement in the apvc_reset_count_art AJAX action, available to any authenticated user, leading t…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01345 Published 2022-04-25 Fixed in 6.1.6 CWE-89