Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

5 records

Vendor: a3rev Component: Page View Count Clear all filters
TI-2025-02460 CVE-2025-2816 · GHSA-ghx7-9hwq-xp4w

Page View Count 2.8.0 - 2.8.4 - Missing Authorization to Authenticated (Subscriber+) Limited Options Update

Priority LOW 37

The Page View Count plugin for WordPress is vulnerable to unauthorized modification of data that can lead to a denial of service due to a missing capability check on the yellow_message_dontshow() function in versions 2.8…

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00371 Published 2025-05-01 No fix listed CWE-862
TI-2023-00091 CVE-2023-0095 · GHSA-mw65-hxxp-wc93

Page View Count < 2.6.1 - Contributor+ Stored XSS

Priority MEDIUM 58

The Page View Count WordPress plugin before 2.6.1 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor r…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00573 Published 2023-02-06 Fixed in 2.6.1
TI-2022-00358 CVE-2022-0434 · GHSA-qhcq-6xcp-843h

Page Views Count < 2.4.15 - Unauthenticated SQL Injection

Priority MEDIUM 58

The Page View Count WordPress plugin before 2.4.15 does not sanitise and escape the post_ids parameter before using it in a SQL statement via a REST endpoint, available to both unauthenticated and authenticated users.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.14783 Published 2022-03-07 Fixed in 2.4.15 CWE-89
TI-2021-06796 CVE-2021-24509 · GHSA-qjp7-r5pf-4fvh

Page View Counts < 2.4.9 - Contributor+ Stored XSS

Priority LOW 25

The Page View Count WordPress plugin before 2.4.9 does not escape the postid parameter of pvc_stats shortcode, allowing users with a role as low as Contributor to perform Stored XSS attacks.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00624 Published 2021-08-09 Fixed in 2.4.9 CWE-79