A3rev

Page View Count

5 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8.1

CVE-2025-2816

  • EPSS 0.08%
  • Veröffentlicht 01.05.2025 02:23:03
  • Zuletzt bearbeitet 12.05.2025 19:38:14

The Page View Count plugin for WordPress is vulnerable to unauthorized modification of data that can lead to a denial of service due to a missing capability check on the yellow_message_dontshow() function in versions 2.8.0 to 2.8.4. This makes it pos...

5.4

CVE-2023-0095

Exploit
  • EPSS 0.29%
  • Veröffentlicht 06.02.2023 20:15:12
  • Zuletzt bearbeitet 25.03.2025 19:15:40

The Page View Count WordPress plugin before 2.6.1 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Store...

4.3

CVE-2022-40131

  • EPSS 0.06%
  • Veröffentlicht 03.11.2022 20:15:30
  • Zuletzt bearbeitet 21.11.2024 07:20:55

Cross-Site Request Forgery (CSRF) vulnerability in a3rev Software Page View Count plugin <= 2.5.5 on WordPress allows an attacker to reset the plugin settings.

9.8

CVE-2022-0434

Exploit
  • EPSS 88.59%
  • Veröffentlicht 07.03.2022 09:15:09
  • Zuletzt bearbeitet 21.11.2024 06:38:37

The Page View Count WordPress plugin before 2.4.15 does not sanitise and escape the post_ids parameter before using it in a SQL statement via a REST endpoint, available to both unauthenticated and authenticated users. As a result, unauthenticated att...

5.4

CVE-2021-24509

Exploit
  • EPSS 0.16%
  • Veröffentlicht 09.08.2021 10:15:07
  • Zuletzt bearbeitet 21.11.2024 05:53:12

The Page View Count WordPress plugin before 2.4.9 does not escape the postid parameter of pvc_stats shortcode, allowing users with a role as low as Contributor to perform Stored XSS attacks. A post made by a contributor would still have to be approve...