CVE-2017-18614: Wp-Kama Kama Click Counter

High severity, CVSS 8.1. EPSS: 2% chance of exploitation in the next 30 days.

The kama-clic-counter plugin 3.4.9 for WordPress has SQL injection via the admin.php order parameter.

Affected products

• Wp-Kama Kama Click Counter: up to and including 3.4.9

Published 2019-09-13. Last modified 2026-06-17.