WP Views Counter

WP Views Counter has 2 disclosed vulnerabilities in the WordSec catalog, all reported in 2025; all 2 are fixed as of September 2026. Their average CVSS score is 5.8, and the most serious one scores 6.4 out of 10. 2025 was the busiest year with 2 disclosures.

The most common weakness is Cross-Site Scripting, behind 1 of the records (50%). Other recurring categories include Missing Authorization.

Every one of the 2 issues recorded for WP Views Counter has a vendor fix available, so running the current release closes all known holes.

2 independent researchers contributed these findings, one record each. WP Views Counter is installed on roughly 2,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.9.7.

Strategic Overview

Avg CVSSMedium
5.8/ 10
Patch Coverage100%
Open

0

Fixed

2

Get automatic notifications for all WP Views Counter vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.4CVE-2025-49859

WP Views Counter <= 2.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

2 records
WP Views Counter banner
Latestv2.1.3

WP Views Counter

etruel

Author

etruel

5.0(5)
100/100
Last Updated
2025-12-19 (9mo ago)
Active Installs
2,000+
Downloads
43,957
Requires WP
3.1+
Requires PHP
7.0+
Tested up to
WP 6.9.7
Created
2013-05-11 (14y ago)

WP Views Counter is a lightweight, high-performance plugin that accurately tracks and displays post, page, and custom post type views — directly in the WordPress admin, via shortcode, or with a Gutenberg block. Built for bloggers, marketers, store owners, and developers, it works seamlessly across all post types — including WooCommerce and Easy Digital Downloads — with minimal impact on your site’s speed. No external scripts. No unnecessary bloat. This plugin does one job and does it exceptionally well: it tells you which content is getting the most attention. Key Benefits ✅ Accurate view counts in admin columns, shortcode, or block ✅ Metabox per post with real-time views and reset button ✅ Exclude views from logged-in users or specific roles ✅ Fully AJAX-powered — no page reloads or slowdowns ✅ Works with all post types, including EDD and WooCommerce ✅ Block to display popular posts — no legacy widgets required ✅ Developer-friendly and fully translatable ✅ Import views from other plugins Whether you’re optimizing your content strategy or simply want to know what’s working, WP Views Counter is the simple and effective alternative to bloated analytics plugins. 📦 Start tracking your most popular content today — with clarity, speed and control. 💡 Developer-friendly: Contribute on GitHub — forks and pull requests welcome.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C