Approved changes feed: RSS · Atom

cpe:2.3:a:dangrossman:w3counter_free_real-time_web_stats:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorDangrossman (4985a488-c1b6-5b53-b361-6bc99600b33a)
ProductW3Counter Free Real Time Web Stats (67800d6a-fcfd-5bb9-96fb-a19042815f79)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-28856 vulnerable 2026-06-08 07:14:56.105804 WordPress W3Counter Free Real-Time Web Stats plugin <= 4.1 - Cross Site Request Forgery (CSRF) vulnerability
MEDIUM (4.3)
Cross-Site Request Forgery (CSRF) vulnerability in dangrossman W3Counter Free Real-Time Web Stats blog-stats-by-w3counter allows Cross Site Request Forgery.This issue affects W3Counter Free Real-Time Web Stats: from n/a through <= 4.1.
Published: 2025-03-11T21:00:30.006Z
Updated: 2026-04-28T16:11:49.162Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.