Vulnerabilities

TI-2025-13682 CVE-2025-14999 · GHSA-h4x2-9gh9-6543

Latest Tabs <= 1.5 - Cross-Site Request Forgery to Plugin's Settings Update

LOW 19

The Latest Tabs plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.5.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00124 Published 2026-01-07 No fix listed CWE-352

TI-2016-09160 CVE-2016-15040 · GHSA-275c-875v-46qg

Kento Post View Counter <= 2.8 - SQL Injection

MEDIUM 50

The Kento Post View Counter plugin for WordPress is vulnerable to SQL Injection via the 'kento_pvc_geo' parameter in versions up to, and including, 2.8 due to insufficient escaping on the user supplied parameter and lack…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00545 Published 2024-10-16 No fix listed CWE-89

TI-2016-09020 CVE-2016-10982 · GHSA-xjjc-g3r4-r6xr

The kento-post-view-counter plugin through 2.8 for WordPress has wp-admin/admin.php?page=kentopvc_settings CSRF.

LOW 39

The kento-post-view-counter plugin through 2.8 for WordPress has wp-admin/admin.php?page=kentopvc_settings CSRF.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00732 Published 2019-09-17 No fix listed CWE-352

TI-2016-09019 CVE-2016-10981 · GHSA-7frh-23gc-cx4h

The kento-post-view-counter plugin through 2.8 for WordPress has stored XSS via…

LOW 29

The kento-post-view-counter plugin through 2.8 for WordPress has stored XSS via kento_pvc_numbers_lang, kento_pvc_today_text, or kento_pvc_total_text.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00956 Published 2019-09-17 No fix listed CWE-79

TI-2016-09018 CVE-2016-10980 · GHSA-7px9-8jq2-c4vv

The kento-post-view-counter plugin through 2.8 for WordPress has XSS via kento_pvc_geo.

LOW 29

The kento-post-view-counter plugin through 2.8 for WordPress has XSS via kento_pvc_geo.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00956 Published 2019-09-17 No fix listed CWE-79

Vulnerabilities

Filters

Latest Tabs <= 1.5 - Cross-Site Request Forgery to Plugin's Settings Update

Kento Post View Counter <= 2.8 - SQL Injection

The kento-post-view-counter plugin through 2.8 for WordPress has wp-admin/admin.php?page=kentopvc_settings CSRF.

The kento-post-view-counter plugin through 2.8 for WordPress has stored XSS via…

The kento-post-view-counter plugin through 2.8 for WordPress has XSS via kento_pvc_geo.