PatchTheCVE: post pay counterhttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2023-47673: Unauthhttps://patchthecve.com/cve/CVE-2023-47673.htmlhttps://patchthecve.com/cve/CVE-2023-47673.htmlWed, 17 Jun 2026 06:33:05 +0000HIGH 7.1: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Stefano Ottolenghi Post Pay Counter plugin <= 2.784 versions.CVE-2017-18584: The post-pay-counter plugin before 2.731 for WordPress has no permissions check for an update-settinga action.https://patchthecve.com/cve/CVE-2017-18584.htmlhttps://patchthecve.com/cve/CVE-2017-18584.htmlWed, 17 Jun 2026 01:13:08 +0000HIGH 7.5: The post-pay-counter plugin before 2.731 for WordPress has no permissions check for an update-settinga action.CVE-2017-18583: The post-pay-counter plugin before 2.731 for WordPress has PHP Object Injection.https://patchthecve.com/cve/CVE-2017-18583.htmlhttps://patchthecve.com/cve/CVE-2017-18583.htmlWed, 17 Jun 2026 01:13:08 +0000CRITICAL 9.8: The post-pay-counter plugin before 2.731 for WordPress has PHP Object Injection.