Approved changes feed: RSS · Atom

cpe:2.3:a:redlettuce:wp_word_count:*:*:*:*:*:wordpress:*:*

part: a version: * update: *

VendorRedlettuce (7e28fe90-4c79-5667-a07b-6ff50178f60d)
ProductWp Word Count (18935ff4-2e05-53fb-8e05-001a1fe34e10)
Edition*
Language*
Software edition*
Target softwarewordpress
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-46628 vulnerable 2026-06-08 06:12:45.422038 WordPress WP Word Count plugin <= 3.2.4 - Broken Access Control vulnerability
MEDIUM (4.3)
Missing Authorization vulnerability in RedLettuce Plugins WP Word Count allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Word Count: from n/a through 3.2.4.
Published: 2025-01-02T12:00:24.152Z
Updated: 2026-04-28T16:08:47.340Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-3408 vulnerable 2026-06-08 05:48:20.877978 WP Word Count <= 3.2.3 - Admin+ Stored Cross-Site Scripting
The WP Word Count WordPress plugin through 3.2.3 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed.
Published: 2022-10-31T00:00:00.000Z
Updated: 2025-05-06T20:15:44.318Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.