Description
Cross-Site Request Forgery (CSRF) vulnerability in Mahlamusa Who Hit The Page – Hit Counter plugin <= 1.4.14.3 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Mahlamusa | Who Hit The Page – Hit Counter | ≤ 1.4.14.3 | — |
Medium · 4.3
CVE-2023-46087
EUVD-2023-50348GHSA-67p5-wmww-f3q5
WordPress Who Hit The Page – Hit Counter Plugin <= 1.4.14.3 is vulnerable to Cross Site Request Forgery (CSRF)
Published Oct 16, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack