CVE-2020-5766: Srs Simple Hits Counter Project Srs Simple Hits Counter

High severity, CVSS 7.5. EPSS: 7.2% chance of exploitation in the next 30 days.

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in SRS Simple Hits Counter Plugin for WordPress 1.0.3 and 1.0.4 allows a remote, unauthenticated attacker to determine the value of database fields.

Affected products

• Srs Simple Hits Counter Project Srs Simple Hits Counter: version 1.0.3 only; version 1.0.4 only

Published 2020-07-13. Last modified 2026-06-17.