Counter live visitors for WooCommerce
Counter live visitors for WooCommerce has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it is fixed as of September 2026. Their average CVSS score is 8.2, and the most serious one scores 8.2 out of 10. Severity breakdown: 0 critical and 1 high.
The most common weakness is Path Traversal, behind 1 of the records (100%).
The one issue recorded for Counter live visitors for WooCommerce has a vendor fix available, so running the current release closes it.
All of these findings were reported by mikemyers. Counter live visitors for WooCommerce is installed on roughly 6,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.9.7.
CVE-2025-7359Counter live visitors for WooCommerce <= 1.3.6 - Unauthenticated Arbitrary File Deletion in wcvisitor_get_block
Read the full analysisVulnerability Records
Counter live visitors for WooCommerce
Author
DanielRiera
🎉+1.000 Active installations!!🎉 Important NOTE If your website uses a cache plugin, you can activate the option ‘Your site use cache system?’, This option will enable an additional call to show the block of active users 🙂 It is not a simple visitor counter, this counter is shown on each product with the number of users who are currently viewing that same product Navigate to Woocommerce -> Visitor Counter in the administration menu for configure You use Elementor or other page builder? Try [wcvisitor] shortcode, available from 1.1.2 version Since version 1.2.0 the msgone and msgmore parameters are included (optionals) to customize the message for each shortcode, example: ` [wcvisitor msgOne=”Only One” msgMore=”Now %n users on this product”] ` Localization Español (Spanish), English (English US)
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C