Radar sectionsPlugins & themes
Check my site

WordPress plugin

Advanced Page Visit Counter – Most Wanted Analytics Plugin for WordPress security & vulnerabilities

advanced-page-visit-counter— active installsLast vulnerability Apr 11, 2024

Unpatched vulnerability in the latest version

At least one vulnerability affects the latest version and no fix has been released. Deactivate the plugin or restrict access to the affected feature until the vendor ships a patch.

9Known vulnerabilities
  • Critical1
  • High4
  • Medium4
  • Low0
Vulnerabilities per year
2022: 3 vulnerabilities3222023: 4 vulnerabilities4232024: 2 vulnerabilities224

All Advanced Page Visit Counter – Most Wanted Analytics Plugin for WordPress vulnerabilities

Advanced Page Visit Counter – Most Wanted Analytics Plugin for WordPress vulnerabilities
SeverityVulnerabilityCVEPublished
Critical9.1Authenticated (Administrator+) SQL Injection
≤8.0.6No patch available
CVE-2024-32098
High8.8Authenticated (Contributor+) SQL Injection
≤7.1.1Update to 8.0.1
CVE-2023-45074
High8.8Authenticated (Contributor+) SQL Injection
≤6.4.2Update to 6.4.2.1
CVE-2023-28788
High8.8Subscriber+ Blind SQL injection
<6.1.6Update to 6.1.6
CVE-2021-24957
High7.2Unauthenticated Cross-Site Scripting
≤5.0.8Update to 6.0.0
CVE-2021-25086

Advanced Page Visit Counter – Most Wanted Analytics Plugin for WordPress: common questions

Does Advanced Page Visit Counter – Most Wanted Analytics Plugin for WordPress have known vulnerabilities?

Yes. VulnCrest Radar lists 9 known vulnerabilities in Advanced Page Visit Counter – Most Wanted Analytics Plugin for WordPress: 1 critical, 4 high, 4 medium. At least one is not fixed in the latest version.

How do I check which version of Advanced Page Visit Counter – Most Wanted Analytics Plugin for WordPress I run?

In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.

What is the most recent Advanced Page Visit Counter – Most Wanted Analytics Plugin for WordPress vulnerability?

CVE-2024-32098, published Apr 11, 2024: Advanced Page Visit Counter <= 8.0.6 - Authenticated (Administrator+) SQL Injection. Severity: Critical (CVSS 9.1).

Is any Advanced Page Visit Counter – Most Wanted Analytics Plugin for WordPress vulnerability listed in CISA KEV?

No. None of the known Advanced Page Visit Counter – Most Wanted Analytics Plugin for WordPress vulnerabilities is currently listed in the CISA KEV catalog.

Search VulnCrest Radar

Are you sure?