CVE-2021-25086: Advanced Page Visit Counter Project Advanced Page Visit Counter

Medium severity, CVSS 6.1. EPSS: 1.3% chance of exploitation in the next 30 days.

The Advanced Page Visit Counter WordPress plugin before 6.1.2 does not sanitise and escape some input before outputting it in an admin dashboard page, allowing unauthenticated attackers to perform Cross-Site Scripting attacks against admins viewing it

Affected products

• Advanced Page Visit Counter Project Advanced Page Visit Counter: before 6.1.2 (fixed in 6.1.2)

Published 2022-05-02. Last modified 2026-06-17.