Srs Simple Hits Counter Vulnerabilities

The SRS Simple Hits Counter plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.1.0. This is due to missing or incorrect nonce validation on the srs_admin_settings_page() function. This makes it possible for unauthenticated attackers to modify the plugin's settings via a...

CVSS:

4.3

Affected:

up to 1.1.0

Fixed in:

1.1.1

Disclosed:

Jan 19, 2023

CVE-2023-22709 on NVD →

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in SRS Simple Hits Counter Plugin for WordPress 1.0.3 and 1.0.4 allows a remote, unauthenticated attacker to determine the value of database fields.

CVSS:

7.5

Affected:

1.0.3 – 1.0.4

Fixed in:

1.1.0

Disclosed:

Jul 10, 2020

CVE-2020-5766 on NVD →