CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L
What the vulnerability does
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Page Visit Counter Advanced Page Visit Counter – Most Wanted Analytics Plugin for WordPress allows SQL Injection.This issue affects Advanced Page Visit Counter – Most Wanted Analytics Plugin for WordPress: from n/a through 7.1.1.
Explanation of Vulnerability in Simple Terms
The Advanced Page Visit Counter plugin for WordPress contains a SQL injection vulnerability in versions up to 7.1.1. An authenticated user with low privileges can inject malicious SQL code through unfiltered input, allowing them to read sensitive database information. The vulnerability affects the site's database confidentiality and may impact availability.
What an attacker can do
Read sensitive data from the WordPress database, including user information and configuration details.
Potential impact on your site
Unauthorized access to your database contents, including user credentials, posts, and plugin settings.
Conditions required to exploit
Attacker must have a WordPress user account with low-level privileges (e.g., subscriber or contributor role).
Key dates
External resources
Related vulnerabilities
