Skip to content
Sign in
Not rated

CVE-2022-0434 The Page View Count WordPress plugin before 2.4.15 does not sanitise and escape the post_ids parameter before using it…

Description

The Page View Count WordPress plugin before 2.4.15 does not sanitise and escape the post_ids parameter before using it in a SQL statement via a REST endpoint, available to both unauthenticated and authenticated users. As a result, unauthenticated attackers could perform SQL injection attacks

Affected products and versions

Product Affected versions Fixed in
Page View Count 2.4 earliest → < 2.4.15 2.4.15

Other CVEs of Page View Count

The 3 CVEs of Page View Count →
CVE-2023-0095 The Page View Count WordPress plugin before 2.6.1 does not validate and escape some of its block options before… 5.4 Medium CVE-2021-24509 The Page View Count WordPress plugin before 2.4.9 does not escape the postid parameter of pvc_stats shortcode,… Not rated
Track this CVE