CVE-2015-5533: Count Per Day Project Count Per Day

High severity, CVSS 7.2. EPSS: 7.2% chance of exploitation in the next 30 days.

SQL injection vulnerability in counter-options.php in the Count Per Day plugin before 3.4.1 for WordPress allows remote authenticated administrators to execute arbitrary SQL commands via the cpd_keep_month parameter to wp-admin/options-general.php. NOTE: this can be leveraged using CSRF to allow remote attackers to execute arbitrary SQL commands.

Affected products

• Count Per Day Project Count Per Day: up to and including 3.4

Published 2017-10-23. Last modified 2026-06-17.