Visit Counter

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:bestiadurmiente:visit_counter:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorBestiadurmiente (3eb7c074-66f7-5485-9589-c39fa8cfd8d9)
ProductVisit Counter (051a6784-8342-59da-a071-068c8cd65365)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-49065 vulnerable 2026-06-08 07:29:12.534288 WordPress Visit Counter Plugin <= 1.0 - Cross Site Scripting (XSS) Vulnerability
HIGH (7.1)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in BestiaDurmiente Visit Counter visit-counter allows Stored XSS.This issue affects Visit Counter: from n/a through <= 1.0.
Published: 2025-08-14T10:34:11.102Z
Updated: 2026-04-28T16:12:58.545Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-12452 vulnerable 2026-06-08 07:04:30.259235 Visit Counter 1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
MEDIUM (6.1)
The Visit Counter plugin for WordPress is vulnerable to Cross-Site Request Forgery in version 1.0. This is due to missing or incorrect nonce validation on the widgets.php page. This makes it possible for unauthenticated attackers to update settings and inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
Published: 2025-11-04T04:27:22.522Z
Updated: 2025-11-04T15:08:35.205Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.