https://www.pluginvulnerabilities.com/2017/06/08/cross-site-request-forgery-csrfcross-site-scripting-xss-vulnerability-in-count-per-day/

Just a couple of days after we discussed a situation where a popular plugin had a vulnerability in it for years due to a security fix not being fully applied, we ran into another example of a security fix only being partially applied in a popular plugin. This time it involves the plugin Count per Day, which has 100,000+ active install according

Share This