Page View Count, CVE-2022-0434

CVE, Research URL: CVE-2022-0434
Home page URL: Security reports for Page View Count
Application: Page View Count
Published on: Mar 07, 2022
Research Description: The Page View Count WordPress plugin before 2.4.15 does not sanitise and escape the post_ids parameter before using it in a SQL statement via a REST endpoint, available to both unauthenticated and authenticated users. As a result, unauthenticated attackers could perform SQL injection attacks
Affected versions: Min -, max 2.4.15.
Status: vulnerable