Vulnerabilities

TI-2017-14169 CVE-2017-20103 · GHSA-283c-28ph-cjjp

Kama Click Counter Plugin admin.php Blind sql injection

HIGH 71

A vulnerability classified as critical has been found in Kama Click Counter Plugin up to 3.4.8.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0098 Published 2022-06-27 No fix listed CWE-89

TI-2017-13788 CVE-2017-18615 · GHSA-5q5h-g93j-vx2v

LOW 29

The kama-clic-counter plugin before 3.5.0 for WordPress has XSS.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00914 Published 2019-09-13 No fix listed CWE-79

TI-2017-13787 CVE-2017-18614 · GHSA-5hw9-5r55-6v6g

LOW 39

The kama-clic-counter plugin 3.4.9 for WordPress has SQL injection via the admin.php order parameter.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.0201 Published 2019-09-13 No fix listed CWE-89