CVE-2012-0896

no score yetEPSS 23%

Absolute path traversal vulnerability in download.php in the Count Per Day module before 3.1.1 for WordPress allows remote attackers to read arbitrary files via the f parameter.

EPSS: 23% chance of exploitation in the next 30 days; higher than 97% of CVEs (scores of 2026-10-31)
CWE: CWE-22
Published: 2012-01-20
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

count_per_day_project:count_per_day
tom_braider:count_per_day

References

http://osvdb.org/78270
http://packetstormsecurity.org/files/108631/countperday-downloadxss.txt
http://plugins.trac.wordpress.org/changeset/488883/count-per-day
http://secunia.com/advisories/47529
http://wordpress.org/extend/plugins/count-per-day/changelog/

Check your stack JSON