Who Hit The Page Hit Counter

3 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2023-47558 HIGH This Week

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Mahlamusa Who Hit The Page - Hit Counter allows SQL Injection.4.14.3. Rated high severity (CVSS 7.6), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

SQLi Who Hit The Page Hit Counter

NVD

CVSS 3.1

7.6

EPSS

0.1%

CVE-2023-46087 HIGH This Week

Cross-Site Request Forgery (CSRF) vulnerability in Mahlamusa Who Hit The Page - Hit Counter plugin <= 1.4.14.3 versions. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

CSRF Who Hit The Page Hit Counter

NVD

CVSS 3.1

8.8

EPSS

0.2%

CVE-2023-25466 MEDIUM POC This Month

Unauth. Rated medium severity (CVSS 5.8), this vulnerability is remotely exploitable, no authentication required. Public exploit code available and no vendor patch available.

XSS Who Hit The Page Hit Counter

NVD

CVSS 3.1

5.8

EPSS

0.1%

CVE-2023-47558

EPSS 0% CVSS 7.6

HIGH This Week

SQLi Who Hit The Page Hit Counter

NVD

CVE-2023-46087

EPSS 0% CVSS 8.8

HIGH This Week

CSRF Who Hit The Page Hit Counter

NVD

CVE-2023-25466

EPSS 0% CVSS 5.8

MEDIUM POC This Month

Unauth. Rated medium severity (CVSS 5.8), this vulnerability is remotely exploitable, no authentication required. Public exploit code available and no vendor patch available.

XSS Who Hit The Page Hit Counter

NVD