Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2021-25086

Advanced Page Visit Counter < 6.1.2 - Unauthenticated Stored Cross-Site Scripting

The Advanced Page Visit Counter WordPress plugin before 6.1.2 does not sanitise and escape some input before outputting it in an admin dashboard page, allowing unauthenticated attackers to perform Cross-Site Scripting attacks against admins viewing it

CVSS 3.1 · 6.1 Medium EPSS 1.3% KEV · Not listed
Vendors
Advanced Page Visit Counter Project
Products
Advanced Page Visit Counter
CVE-2021-24957

Advanced Page Visit Counter < 6.1.6 - Subscriber+ Blind SQL injection

The Advanced Page Visit Counter WordPress plugin before 6.1.6 does not escape the artID parameter before using it in a SQL statement in the apvc_reset_count_art AJAX action, available to any authenticated user, leading to a SQL injection

CVSS 3.1 · 8.8 High EPSS 1.3% KEV · Not listed
Vendors
Advanced Page Visit Counter Project
Products
Advanced Page Visit Counter