Total
2 CVE
CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
---|---|---|---|---|---|
CVE-2023-46628 | 1 Redlettuce | 1 Wp Word Count | 2025-03-21 | N/A | 4.3 MEDIUM |
Missing Authorization vulnerability in RedLettuce Plugins WP Word Count allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Word Count: from n/a through 3.2.4. | |||||
CVE-2022-3408 | 1 Redlettuce | 1 Wp Word Count | 2024-11-21 | N/A | 4.8 MEDIUM |
The WP Word Count WordPress plugin through 3.2.3 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed. |