← WordPress Vulnerabilities
WordPress security by component

Animated Number Counters

Animated Number Counters is a WordPress component with 2 published CVE records in this archive. The latest tracked vulnerability was published Aug 29, 2024; the highest CVE/CNA score is 6.5.

Plugin slug: animated-number-counters

CVE-2024-43957: Animated Number Counters: Filesystem traversal

Animated Number Counters is affected by filesystem traversal. Exposure depends on how the affected operation is made reachable by the site. A crafted path can escape the intended directory and reach files or directories elsewhere on the server.

PublishedAug 29, 2024
Safe version guidanceSee mitigation notes
Safe version
Aug 29, 2024 CVE-2024-43957
Animated Number Counters: Filesystem traversal
Animated Number Counters is affected by filesystem traversal. Exposure depends on how the affected operation is made reachable by the site. A crafted path can escape the intended directory and reach files or directories elsewhere on the server.
See mitigation notes
CVE6.5
NVD8.8
Aug 10, 2023 CVE-2023-24393
Animated Number Counters: Cross-site scripting
Animated Number Counters is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
See mitigation notes
CVE6.5
NVD5.4