CVE-2017-18584: Post Pay Counter Project Post Pay Counter

High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days.

The post-pay-counter plugin before 2.731 for WordPress has no permissions check for an update-settinga action.

Affected products

• Post Pay Counter Project Post Pay Counter: before 2.731 (fixed in 2.731)

Published 2019-08-22. Last modified 2026-06-17.