Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

4 records

Vendor: Page Visit Counter Component: Advanced Page Visit Counter Clear all filters
TI-2023-05087 CVE-2023-5529 · GHSA-23vm-fxf4-h89x

Advanced Page Visit Counter <= 8.0.6 - Admin+ Stored XSS

Priority MEDIUM 55

The Advanced Page Visit Counter WordPress plugin before 8.0.6 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even wh…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00389 Published 2025-05-15 Fixed in 8.0.6 CWE-79
TI-2023-13298 CVE-2023-28788 · GHSA-j835-2p2c-7jvw

WordPress Advanced Page Visit Counter Plugin <= 6.4.2 is vulnerable to SQL Injection

Priority LOW 39

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Page Visit Counter Advanced Page Visit Counter – Most Wanted Analytics Plugin for WordPress.This issue affects Advance…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00727 Published 2023-12-20 No fix listed CWE-89
TI-2023-27557 CVE-2023-50371 · GHSA-hc3j-xxm8-9r6j

WordPress Advanced Page Visit Counter Plugin <= 8.0.6 is vulnerable to Cross Site Scripting (XSS)

Priority LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Page Visit Counter Advanced Page Visit Counter – Most Wanted Analytics Plugin for WordPress allows Stored XSS.This iss…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00368 Published 2023-12-14 No fix listed CWE-79
TI-2023-24122 CVE-2023-45074 · GHSA-393j-fpg3-h6c9

WordPress Advanced Page Visit Counter Plugin <= 7.1.1 is vulnerable to SQL Injection

Priority MEDIUM 44

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Page Visit Counter Advanced Page Visit Counter – Most Wanted Analytics Plugin for WordPress allows SQL Injection.This…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00685 Published 2023-11-06 No fix listed CWE-89