Skip to content
OpenAdvisories

Vendor

BestiaDurmiente

2 known vulnerabilities.

Products

Visit Counter 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.1
    CVE-2025-12452

    Visit Counter 1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting

    The Visit Counter plugin for WordPress is vulnerable to Cross-Site Request Forgery in version 1.0. This is due to missing or incorrect nonce validation on the widgets.php page. This makes it possible for unauthenticated attackers to update settings and inject…

    BestiaDurmiente Visit Counter Web / CMS