Vulnerabilities > Redlettuce > WP Word Count > 2.0.1

DATE CVE VULNERABILITY TITLE RISK
2025-01-02 CVE-2023-46628 Missing Authorization vulnerability in Redlettuce WP Word Count
Missing Authorization vulnerability in RedLettuce Plugins WP Word Count allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Word Count: from n/a through 3.2.4.
network
low complexity
redlettuce CWE-862
4.3
2022-10-31 CVE-2022-3408 Unspecified vulnerability in Redlettuce WP Word Count
The WP Word Count WordPress plugin through 3.2.3 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed.
network
low complexity
redlettuce
4.8