CVE-2012-0896: Count Per Day Project Count Per Day

Medium severity, CVSS 5.0. EPSS: 22.7% chance of exploitation in the next 30 days.

Absolute path traversal vulnerability in download.php in the Count Per Day module before 3.1.1 for WordPress allows remote attackers to read arbitrary files via the f parameter.

Affected products

• Count Per Day Project Count Per Day: version 2.2 only; version 2.15 only; version 2.15.1 only; version 2.16 only
• Tom Braider Count Per Day: up to and including 3.1; version 1.0 only

Published 2012-01-20. Last modified 2026-06-16.