53 matches found
CVE-2017-20103 Kama Click Counter Plugin admin.php Blind sql injection
A vulnerability classified as critical has been found in Kama Click Counter Plugin up to 3.4.8. This affects an unknown part of the file wp-admin/admin.php. The manipulation of the argument orderby/order with the input ASC%2cselectfromselectsleep2a leads to sql injection Blind. It is possible to...
CVE-2017-20103
CVE-2017-20103 describes a blind SQL injection in the Kama Click Counter Plugin (up to version 3.4.8) affecting wp-admin/admin.php via the order_by/order parameter (ASC, (select sleep(2))). The vulnerability can be exploited remotely and the public exploit has been disclosed. Upgrading to version...
WordPress Advanced Page Visit Counter – Most Advanced WordPress Visit Counter Plugin plugin <= 5.0.8 - Sensitive Information Disclosure vulnerability
Sensitive Information Disclosure vulnerability discovered in WordPress Advanced Page Visit Counter – Most Advanced WordPress Visit Counter Plugin plugin versions = 5.0.8. Solution Update the WordPress Advanced Page Visit Counter – Most Advanced WordPress Visit Counter Plugin to the latest availab...
WordPress WP Pro Counter plugin <= 1.1 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability
Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress WP Pro Counter plugin versions = 1.1. Solution No patched version available...
Design/Logic Flaw
The post-pay-counter plugin before 2.731 for WordPress has no permissions check for an update-settinga action...
CVE-2015-4084 - WordPress Free Counter Plugin [Stored XSS]
Exploit Title: WordPress Free Counter Plugin Stored XSS Date: 2015/05/25 Exploit Author: Panagiotis Vagenas Contact: https://twitter.com/panVagenas Vendor Homepage: http://www.free-counter.org Software Link: https://wordpress.org/plugins/free-counter/ Version: 1.1 Tested on: WordPress 4.2.2...
CVE-2015-4084
Cross-site scripting XSS vulnerability in the Free Counter plugin 1.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the value parameter in a checkstat action to wp-admin/admin-ajax.php...
Cross site scripting
Cross-site scripting XSS vulnerability in the Free Counter plugin 1.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the value parameter in a checkstat action to wp-admin/admin-ajax.php...
CVE-2015-4084
The CVE-2015-4084 entry affects the WordPress Free Counter plugin (version 1.1). The root cause is insufficient input validation in the value_ parameter of the check_stat action handled by wp-admin/admin-ajax.php, enabling stored XSS via wp_ajax_nopriv_check_stat. Impact: any page showing the plu...
WordPress Free Counter Plugin 1.1 - Stored XSS
This vulnerability works by using wpajaxnoprivcheckstat action. Any user can perform a stored XSS attack. Solution Upgrade the plugin...
WordPress Plugin Free Counter 1.1 - Persistent Cross-Site Scripting
Exploit Title: WordPress Free Counter Plugin Stored XSS Date: 2015/05/25 Exploit Author: Panagiotis Vagenas Contact: https://twitter.com/panVagenas Vendor Homepage: http://www.free-counter.org Software Link: https://wordpress.org/plugins/free-counter/ Version: 1.1 Tested on: WordPress 4.2.2...
WordPress Free Counter 1.1 Cross Site Scripting
Exploit Title: WordPress Free Counter Plugin Stored XSS Date: 2015/05/25 Exploit Author: Panagiotis Vagenas Contact: https://twitter.com/panVagenas Vendor Homepage: http://www.free-counter.org Software Link: https://wordpress.org/plugins/free-counter/ Version: 1.1 Tested on: WordPress 4.2.2...