Dfactory Post Views Counter vulnerabilities

2 vulnerabilities

Known vulnerabilities in Dfactory Post Views Counter, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

4.8CVE-2021-24613dfactorypost_views_counter+2
EPSS score
0.62%
The Post Views Counter WordPress plugin before 1.3.5 does not sanitise or escape its Post Views Label settings, which could allow high privilege users to perform Cross-Site Scripting attacks in the frontend even when the unfiltered_html capability is disallowed4.3CVE-2024-31264dfactorypost_views_counter+1
EPSS score
0.20%
Unauthenticated Cross Site Request Forgery (CSRF) in Post Views Counter <= 1.4.4 versions.