CVE-2015-5533

SQL injection vulnerability in counter-options.php in the Count Per Day plugin before 3.4.1 for WordPress allows remote authenticated administrators to execute arbitrary SQL commands via the cpdkeepmonth parameter to wp-admin/options-general.php. NOTE: this can be leveraged using CSRF to allow...

PT-2017-6864

Name of the Vulnerable Software and Affected Versions Count Per Day plugin versions prior to 3.4.1 Description The issue allows remote authenticated administrators to execute arbitrary SQL commands via the cpd keep month parameter to "wp-admin/options-general.php". This can be leveraged using CSR...

WordPress Plugin Count Per Day SQL Injection Vulnerability

WordPress is a blogging platform developed using the PHP language that allows users to set up their own websites on servers that support PHP and MySQL databases. A SQL injection vulnerability exists in the WordPress plugin Count Per Day. Due to insufficient filtering of data passed as input to th...