count per day project vulnerabilities

Products

• count per day 4

Latest count per day project CVEs

Newest publication first

1. CVE-2012-6714 Count per Day Plugin < 3.2.3 - Cross-Site Scripting

   Published 2019-08-21

   Medium·CVSS 6.1 EPSS 0.91%

   The count-per-day plugin before 3.2.3 for WordPress has XSS via search words.

2. CVE-2013-7472 Count per Day < 3.2.6 - Cross-Site Scripting

   Published 2019-06-15

   Medium·CVSS 6.1 EPSS 0.98%

   The "Count per Day" plugin before 3.2.6 for WordPress allows XSS via the wp-admin/?page=cpd_metaboxes daytoshow parameter.

3. CVE-2015-5533 Count per Day <= 3.4 - Cross-Site Request Forgery

   Published 2017-10-23

   High·CVSS 7.2 EPSS 7.2% Public exploit

   SQL injection vulnerability in counter-options.php in the Count Per Day plugin before 3.4.1 for WordPress allows remote authenticated administrators to execute arbitrary SQL commands via the cpd_keep_month parameter to wp-admin/options-general.php. NOTE: this can be leveraged usi...

4. CVE-2012-0896 Count per Day <= 3.1 - Arbitrary File Download

   Published 2012-01-20

   Medium·CVSS 5.0 EPSS 22.7% Public exploit

   Absolute path traversal vulnerability in download.php in the Count Per Day module before 3.1.1 for WordPress allows remote attackers to read arbitrary files via the f parameter.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.