Log out
Get PRO

Latest

Input validation vulnerability in SRS Simple Hits Counter 1.0.4

  • Severity: high-risk
  • Status: Open
  • Publication: July 10, 2020

A security vulnerability in the SRS Simple Hits Counter Plugin for WordPress versions 1.0.3 and 1.0.4 could allow an unauthenticated attacker to see information from a website’s database. This means the attacker could see data like user details or passwords without needing to be logged in. This is possible because the plugin does not properly secure certain elements of an SQL command.

Detected in:

SRS Simple Hits Counter open vulnerable versions: >= 1.0.3 <= 1.0.4

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.