CVE-2012-0896

🗓️ 20 Jan 2012 17:00:00Reported by mitreType

cve🔗 web.nvd.nist.gov👁 114 Views🌐 WEB

CVE-2012-0896 Absolute path traversal vulnerability in Count Per Day module for WordPres

Reporter	Title	Published	Views	Family All 12
Circl	CVE-2012-0896	12 Jan 201200:00	–	circl
Cvelist	CVE-2012-0896	20 Jan 201217:00	–	cvelist
Exploit DB	WordPress Plugin Count Per Day - Multiple Vulnerabilities	12 Jan 201200:00	–	exploitdb
EUVD	EUVD-2012-0919	7 Oct 202500:30	–	euvd
Mend	CVE-2012-0896	20 Jan 201217:00	–	mend
Nuclei	Count Per Day <= 3.1 - download.php f Parameter Traversal Arbitrary File Access	8 Oct 202602:15	–	nuclei
NVD	CVE-2012-0896	20 Jan 201217:55	–	nvd
OpenVAS	WordPress Multiple Plugins / Themes Directory Traversal / File Download Vulnerability (HTTP)	20 Nov 202000:00	–	openvas
Prion	Path traversal	20 Jan 201217:55	–	prion
Positive Technologies	PT-2012-2930	20 Jan 201200:00	–	ptsecurity

NVD

Node

AND

Source	Link
osvdb	www.osvdb.org/78270
secunia	www.secunia.com/advisories/47529
plugins	www.plugins.trac.wordpress.org/changeset/488883/count-per-day
exploit-db	www.exploit-db.com/exploits/18355
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/72385
securityfocus	www.securityfocus.com/bid/51402
packetstormsecurity	www.packetstormsecurity.org/files/108631/countperday-downloadxss.txt
wordpress	www.wordpress.org/extend/plugins/count-per-day/changelog/

Parameter	Position	Path	Description	CWE
f	query param	wp-content/plugins/count-per-day/download.php	Absolute path traversal via the f parameter in download.php.	CWE-22
map	query param	wp-content/plugins/count-per-day/map/map.php	XSS vulnerability via the map parameter in map.php.	CWE-22

16 Jun 2026 23:38Current

9.2Critical risk

Vulners AI Score9.2

CVSS 25

EPSS0.22664