Post Views Counter

Post Views Counter has 2 disclosed vulnerabilities in the WordSec catalog, reported between 2021 and 2024; all 2 are fixed as of October 2026. Their average CVSS score is 4.5, and the most serious one scores 4.8 out of 10.

The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (50%). Other recurring categories include Cross-Site Scripting.

Every one of the 2 issues recorded for Post Views Counter has a vendor fix available, so running the current release closes all known holes.

2 independent researchers contributed these findings, one record each. Post Views Counter is installed on roughly 100,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.3.

Strategic Overview

Avg CVSSMedium
4.5/ 10
Patch Coverage100%
Open

0

Fixed

2

Get automatic notifications for all Post Views Counter vulnerabilities before they are exploited.

Highest severity on recordCVSS 4.8CVE-2021-24613

Post Views Counter <= 1.3.4 - Authenticated Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

2 records
Post Views Counter banner
Latestv1.8.1

Post Views Counter

dFactory

Author

dFactory

4.9(1,234)
98/100
Last Updated
2026-10-23 (5d ago)
Active Installs
100,000+
Downloads
5,936,221
Requires WP
6.4+
Requires PHP
7.4+
Tested up to
WP 7.1.3
Created
2014-07-03 (13y ago)

Post Views Counter counts how many times your posts, pages and other content are viewed, shows those counts on your site, and helps you see which content works – right inside WordPress. No external tools. No bloat. Just the numbers you need to see what’s working. It counts two things: Views – Counted views of your selected posts, pages and other content, according to your counting settings. Views can be displayed on your site and used to sort content. Visits – A Visit starts with a browser’s first counted view and covers subsequent counted content views within the fixed Count Interval. Visits are shown as site-wide totals beside Views, not per post. Key Benefits Clarity, speed, and control: Clear, Focused Metrics – Views for every post and Visits for the whole site give you a clear picture of how your content is performing. Made for WordPress – Runs entirely in your site. No GA, no third-party pipes; accurate counts in your Dashboard and post lists. Your counting rules – Choose which content to count, exclude selected visitors, and set the interval for repeat counts. Privacy-first – Views and Visits are stored as aggregate totals on your server. Browser storage helps prevent repeat counting within your Count Interval. Pro offers cookieless browser storage; its optional Strict Counts feature also caches IP-derived data to limit repeat counts. Works at scale – Minimal overhead, no external scripts, Multisite-ready. Display anywhere – Automatically show counts, or place them exactly where you want via blocks, shortcode or PHP. Features Practical features that matter: Count & display views for any post type you select. Count Visits and see them beside Views in the dashboard chart. Three counting modes: PHP, JavaScript, REST API Post Views dashboard widget: a chart of Views, Visits or both, with a Views comparison for the selected month. A month in progress is compared with the same days of the previous month. Top Posts dashboard widget, month by month. Sortable Post Views admin column, with a Views chart for each post. Traffic Signals admin column that flags unusual traffic changes compared with the same days of the previous month. Weekly email summary of how your content performed. Exclude bots, logged-in users, specific roles, or IPs Manually adjust a post’s views when needed. Query and order content by views (developer-friendly) Custom REST API endpoints Count Interval to set the fixed window for repeat counts from the same browser. One-click data import from WP-PostViews, Statify and Page Views Count Show the counter automatically, or place it with the Post Views block, shortcode or PHP function. Most Viewed Posts block and widget. Multisite compatible WPML/Polylang compatible; translation-ready (.pot) Post Views Counter Pro More capability without extra complexity: Fast AJAX counting that keeps counting light on busy sites. Caching compatibility and dynamic loading to count through cached pages and refresh displayed counts when a compatible counting mode is selected. Reports: Views by Date, Post and Author to spot winners, trends and top contributors, plus Visits in aggregate date reports. Visit trends and Views per visit in dashboard insights and email summaries. Performance Insights that explain how a post’s Views changed, in the admin column, Traffic Signals and email summaries. Daily, weekly and monthly email summaries with insights. Traffic sources: aggregate stats on referrers, devices, browsers, operating systems and languages. Views for taxonomy terms, authors and other archives. Customizable Views Period (e.g., last 7/30 days) to control the views count timeframe. Export to CSV/XML to download and share data. Integrations for ordering by views in popular builders (e.g., Elementor Pro, Divi, GenerateBlocks). Learn more about Pro →

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C