Skip to content
OpenAdvisories
High · 7.6 CVE-2023-47558 EUVD-2023-51669GHSA-mc6m-xqh8-j66c

WordPress Who Hit The Page – Hit Counter Plugin <= 1.4.14.3 is vulnerable to SQL Injection

Published Dec 18, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Mahlamusa Product: Who Hit The Page – Hit Counter

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Mahlamusa Who Hit The Page – Hit Counter allows SQL Injection.This issue affects Who Hit The Page – Hit Counter: from n/a through 1.4.14.3.

Affected products

VendorProductAffectedFixed
Mahlamusa Who Hit The Page – Hit Counter ≤ 1.4.14.3 —

References