Critical · 9.8 CVE-2025-23932 EUVD-2025-3547GHSA-676f-vgw4-7c2q

WordPress Quick Count Plugin <= 3.00 - PHP Object Injection vulnerability

Published Jan 22, 2025 · Updated May 11, 2026 · Assigned by Patchstack

Description

Deserialization of Untrusted Data vulnerability in Marko-M Quick Count quick-count allows Object Injection.This issue affects Quick Count: from n/a through <= 3.00.

Affected products

Vendor	Product	Affected	Fixed
Marko-M	Quick Count	≤ 3.00	—

References

https://patchstack.com/database/Wordpress/Plugin/quick-count/vulnerability/wordpress-quick-count-plugin-3-00-php-object-injection-vulnerability?_s_id=cve vdb-entry