Skip to content
OpenAdvisories
Medium · 6.5 CVE-2025-58682 EUVD-2025-30478GHSA-wh6h-5p22-p97m

WordPress Kama Click Counter plugin <= 4.0.4 - Cross Site Scripting (XSS) vulnerability

Published Sep 22, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Timur Kamaev Kama Click Counter kama-clic-counter allows Stored XSS.This issue affects Kama Click Counter: from n/a through <= 4.0.4.

Affected products

VendorProductAffectedFixed
Timur Kamaev Kama Click Counter ≤ 4.0.4 —

References