Kama Clic Counter Vulnerabilities

The Kama Click Counter plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 4.0.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pag...

CVSS:

6.4

Affected:

up to 4.0.4

Fixed in:

4.1.0

Disclosed:

Sep 22, 2025

CVE-2025-58682 on NVD →

The Kama Click Counter plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 4.0.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pag...

CVSS:

6.4

Affected:

up to 4.0.3

Fixed in:

4.0.4

Disclosed:

Jun 12, 2025

CVE-2025-49861 on NVD →

The kama-clic-counter plugin 3.4.9 for WordPress has SQL injection via the admin.php order parameter.

CVSS:

8.1

Affected:

up to 3.4.9

Fixed in:

3.5.0

Disclosed:

Feb 27, 2017

CVE-2017-18614 on NVD →

The Kama Click Counter plugin for WordPress is vulnerable to Cross-Site Scripting in versions up to, and including, 3.4.9 due to insufficient input sanitization and output escaping. This makes it possible for unauthorized attackers to inject arbitrary web scripts that execute in a victim's browser.

CVSS:

6.1

Affected:

up to 3.4.9

Fixed in:

3.5.0

Disclosed:

Feb 27, 2017

CVE-2017-18615 on NVD →