High · 7.1 CVE-2026-81795 EUVD-2026-75526GHSA-xwxp-7w5r-qf2m

WordPress Page Visits Counter – Lite plugin <= 1.2.3 - Cross Site Scripting (XSS) vulnerability

Published Sep 10, 2026 · Updated Sep 10, 2026 · Assigned by Patchstack

Vendor: Denis Botić Product: Page Visits Counter – Lite

Description

Unauthenticated Cross Site Scripting (XSS) in Page Visits Counter – Lite <= 1.2.3 versions.

Affected products

Vendor	Product	Affected	Fixed
Denis Botić	Page Visits Counter – Lite	≤ 1.2.3	—

References

https://patchstack.com/database/wordpress/plugin/page-visits-counter-lite/vulnerability/wordpress-page-visits-counter-lite-plugin-1-2-3-cross-site-scripting-xss-vulnerability?_s_id=cve vdb-entry