plugin

Post Pay Counter Vulnerabilities

3 known security issues reported for the Post Pay Counter WordPress plugin. Most recent disclosed Nov 8, 2023.

1 critical 1 high 1 medium

Running Post Pay Counter on your site? Check whether your installed version is affected.

Scan your site free

Post Pay Counter <= 2.789 - Reflected Cross-Site Scripting

medium

The Post Pay Counter plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'orderby' parameter in versions up to, and including, 2.789 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that exe...

CVSS:
6.1
Affected:
up to 2.789
Fixed in:
2.790
Disclosed:
Nov 8, 2023

CVE-2023-47673 on NVD →

Post Pay Counter < 2.731 - PHP Object Injection

critical

The Post Pay Counter plugin before 2.731 for WordPress has PHP Object Injection via deserialization of untrusted input via the 'import_settings_content' parameter.

CVSS:
9.8
Affected:
up to 2.731
Fixed in:
2.731
Disclosed:
Sep 16, 2017

CVE-2017-18583 on NVD →

Post Pay Counter < 2.731 - Arbitrary Settings Change

high

The Post Pay Counter plugin before 2.731 for WordPress has no permissions check for an update-settings action.

CVSS:
7.5
Affected:
up to 2.731
Fixed in:
2.731
Disclosed:
Sep 16, 2017

CVE-2017-18584 on NVD →

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database