Skip to content
OpenAdvisories

Vendor

nitinmaurya12

2 known vulnerabilities.

Products

WordPress Visitors 1 Block Country 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.1
    CVE-2025-48077

    WordPress Block Country plugin <= 1.0 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in nitinmaurya12 Block Country block-country allows Stored XSS.This issue affects Block Country: from n/a through <= 1.0.

    nitinmaurya12 Block Country
  • High 7.2
    CVE-2022-4541

    WordPress Visitors <= 1.0 - Unauthenticated Stored Cross-Site Scripting via HTTP Header

    The WordPress Visitors plugin for WordPress is vulnerable to Stored Cross-Site Scripting via a spoofed HTTP Header value in versions up to, and including, 1.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticat…

    nitinmaurya12 WordPress Visitors Web / CMS