CVE-2017-18583: Post Pay Counter Project Post Pay Counter

Critical severity, CVSS 9.8. EPSS: 2.1% chance of exploitation in the next 30 days.

The post-pay-counter plugin before 2.731 for WordPress has PHP Object Injection.

Affected products

• Post Pay Counter Project Post Pay Counter: before 2.731 (fixed in 2.731)

Published 2019-08-22. Last modified 2026-06-17.