Skip to content
OpenAdvisories

Product · goback2

salavat counter Plugin

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.4
    CVE-2026-1047

    salavat counter Plugin <= 0.9.5 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'image_url' Parameter

    The salavat counter Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'image_url' parameter in all versions up to, and including, 0.9.5 due to insufficient input sanitization and output escaping. This makes it possible for authe…

    goback2 salavat counter Plugin Web / CMS
  • Medium 6.1
    CVE-2024-11435

    salavat counter Plugin <= 0.9.4 - Reflected Cross-Site Scripting

    The salavat counter Plugin plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'page' parameter in all versions up to, and including, 0.9.4 due to insufficient input sanitization and output escaping. This makes it possible for unauthe…

    goback2 salavat counter Plugin Web / CMS