PT-2025-51418 · WordPress · Wp Views Counter

Published 2025-12-16 · Updated 2025-12-17 · CVE-2025-66130

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions etruel WP Views Counter versions through 2.1.2

Description An issue exists in etruel WP Views Counter where incorrectly configured access control security levels can be exploited, leading to a missing authorization condition.

Recommendations Update etruel WP Views Counter to a version later than 2.1.2.

Fix

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2025-66130

Affected Products

Wp Views Counter

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2025-66130 · Security Note
• https://vdp.patchstack.com/database/Wordpress/Plugin/wpecounter/vulnerability/wordpress-wp-views-counter-plugin-2-1-2-broken-access-control-vulnerability?_s_id=cve · Note
• https://twitter.com/CVEnew/status/2001365780126957720 · Twitter Post
• https://patchstack.com/database/Wordpress/Plugin/wpecounter/vulnerability/wordpress-wp-views-counter-plugin-2-1-2-broken-access-control-vulnerability?_s_id=cve · Note