Kentothemes Kento-Post-View-Counter
4 CVEs affecting Kentothemes Kento-Post-View-Counter. Latest disclosed: 2024-10-16. Critical: 1, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2016-15040 | Critical | 9.8 | 2024-10-16 | The Kento Post View Counter plugin for WordPress is vulnerable to SQL Injection via the 'kento_pvc_geo' parameter in versions up to, and including, 2.8 due to… |
CVE-2016-10982 | High | 8.8 | 2019-09-17 | The kento-post-view-counter plugin through 2.8 for WordPress has wp-admin/admin.php?page=kentopvc_settings CSRF. |
CVE-2016-10981 | Medium | 6.1 | 2019-09-17 | The kento-post-view-counter plugin through 2.8 for WordPress has stored XSS via kento_pvc_numbers_lang, kento_pvc_today_text, or kento_pvc_total_text. |
CVE-2016-10980 | Medium | 6.1 | 2019-09-17 | The kento-post-view-counter plugin through 2.8 for WordPress has XSS via kento_pvc_geo. |