WPS Visitor Counter
WPS Visitor Counter has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it remains unpatched as of September 2026. Their average CVSS score is 6.1, and the most serious one scores 6.1 out of 10.
The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).
The one issue recorded for WPS Visitor Counter has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2025.
All of these findings were reported by Bob Matyas. WPS Visitor Counter is installed on roughly 10,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.9.7.
CVE-2025-9116WPS Visitor Counter <= 1.4.8 - Reflected Cross-Site Scripting
Read the full analysisVulnerability Records

WPS Visitor Counter
Author
techmix
WPS Visitor Counter plugin is one of the best visitor counter plugin in wordpress. This plugin will help you to display the number of visitor your website have and its traffic statistics for your WordPress website. We have tried to include all the available data you needed to show in the visitor counter. Here are the items we are showing on our visitor counter: Users Today Users Yesterday Users Last 7 days Users Last 30 days Users This Month Users This Year Total Users Views Today Views Yesterday Views Last 7 days Views Last 30 days Views This Month Views This Year Total Views Who’s Online Your IP Address Server Time You will find all the data authentic and this will help you to get your website traffic stats. Just install the plugin. It will take effect just after you install it on your website. Our plugin is compatible for all types of websites and able to run in all versions of WordPress. WPS Visitor Counter shortcode Use this [wps_visitor_counter] Shortcode anywhere in your website where you want to show visitor counter. gutenberg block supported Translation Support The plugin is fully internationalized and supports multiple languages. Translation files are located in the /languages/ directory. Currently available languages: * English (default) * Spanish (es_ES) – Complete translation included To create translations for other languages: 1. Use the wps-visitor-counter.pot file as a template 2. Create a .po file for your language (e.g., wps-visitor-counter-fr_FR.po) 3. Translate the strings and compile to .mo format 4. WordPress will automatically load the appropriate translation file Arbitrary section Refer Installation and FAQ section for all required information Support For support and feature requests, please visit our website at https://techmix.xyz/
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C