PatchTheCVE: count per day projecthttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2012-6714: The count-per-day plugin before 3.2.3 for WordPress has XSS via search words.https://patchthecve.com/cve/CVE-2012-6714.htmlhttps://patchthecve.com/cve/CVE-2012-6714.htmlTue, 16 Jun 2026 23:48:39 +0000MEDIUM 6.1: The count-per-day plugin before 3.2.3 for WordPress has XSS via search words.CVE-2013-7472: The "Count per Day" plugin before 3.2.6 for WordPress allows XSS via the wp-admin/?page=cpd_metaboxes daytoshohttps://patchthecve.com/cve/CVE-2013-7472.htmlhttps://patchthecve.com/cve/CVE-2013-7472.htmlWed, 17 Jun 2026 00:02:01 +0000MEDIUM 6.1: The "Count per Day" plugin before 3.2.6 for WordPress allows XSS via the wp-admin/?page=cpd_metaboxes daytoshow parameter.CVE-2015-5533: SQL injection vulnerability in counter-options.php in the Count Per Day plugin before 3.4.1 for WordPress allohttps://patchthecve.com/cve/CVE-2015-5533.htmlhttps://patchthecve.com/cve/CVE-2015-5533.htmlWed, 17 Jun 2026 00:29:17 +0000HIGH 7.2: SQL injection vulnerability in counter-options.php in the Count Per Day plugin before 3.4.1 for WordPress allows remote authenticated administrators to execute arbitrary SQL commands via the cpd_keep_month parameter to wp-admin/options-general.php. NOTE: this can be leveraged using CSRF to allow re