Medium · 6.8 CVE-2022-29446 EUVD-2022-33784GHSA-jjq4-4rfq-9948

WordPress Counter Box plugin <= 1.1.1 - Authenticated Local File Inclusion (LFI) vulnerability

Published May 19, 2022 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Authenticated (administrator or higher role) Local File Inclusion (LFI) vulnerability in Wow-Company's Counter Box plugin <= 1.1.1 at WordPress.

Vendor	Product	Affected	Fixed
Wow-Company	Counter Box (WordPress)	<= 1.1.1 – ≤ 1.1.1	—