WordPress StatCounter plugin cross-site scripting vulnerability

WordPress is the Wordpress Foundation’s suite of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress StatCounter plugin version 2.0.7 previously had a cross-site scripting vulnerability, which originated from the plugin’s failure to clean up and escape the project ID and security code settings, and could be used by attackers to execute JavaScript code on the client side.