Tom Braider

3 CVEs vendor

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2012-3434 Aug 15, 21:55 MEDIUM POC This Month

Multiple cross-site scripting (XSS) vulnerabilities in userperspan.php in the Count Per Day module before 3.2 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1). Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. Public exploit code available and no vendor patch available.

PHP WordPress XSS Wordpress Plugin Count Per Day +1

NVD

CVSS 2.0

4.3

EPSS

0.5%

CVE-2012-0896 Jan 20, 17:55 MEDIUM POC This Month

Absolute path traversal vulnerability in download.php in the Count Per Day module before 3.1.1 for WordPress allows remote attackers to read arbitrary files via the f parameter. Rated medium severity (CVSS 5.0), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP WordPress Path Traversal Wordpress Plugin Count Per Day +2

NVD Exploit-DB

CVSS 2.0

5.0

EPSS

2.8%

CVE-2012-0895 Jan 20, 17:55 MEDIUM POC This Month

Cross-site scripting (XSS) vulnerability in map/map.php in the Count Per Day module before 3.1.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the map parameter. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. Public exploit code available and no vendor patch available.

PHP WordPress XSS Wordpress Plugin Count Per Day +1

NVD Exploit-DB

CVSS 2.0

4.3

EPSS

2.4%

CVE-2012-3434

EPSS 1% CVSS 4.3

MEDIUM POC This Month

PHP WordPress XSS +3

NVD

CVE-2012-0896

EPSS 3% CVSS 5.0

MEDIUM POC This Month

PHP WordPress Path Traversal +4

NVD Exploit-DB

CVE-2012-0895

EPSS 2% CVSS 4.3

MEDIUM POC This Month

PHP WordPress XSS +3

NVD Exploit-DB