EIP-2026-113661

PRE-CVE

WordPress Plugin Count Per Day 3.2.3 - Cross-Site Scripting

Title source: legacy

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-113661. PoCs published by Crim3R.

AI-analyzed exploit summary This is a technical writeup describing a stored XSS vulnerability in the WordPress Count per Day plugin version 3.2.3. The vulnerability allows unauthenticated attackers to inject HTML/JavaScript via the notes.php file, which is accessible without admin restrictions.

Description

WordPress Plugin Count Per Day 3.2.3 - Cross-Site Scripting

Exploits (1)

exploitdb WRITEUP VERIFIED

by Crim3R · textwebappsphp

https://www.exploit-db.com/exploits/20862

View Code ZIP pw:eip

This is a technical writeup describing a stored XSS vulnerability in the WordPress Count per Day plugin version 3.2.3. The vulnerability allows unauthenticated attackers to inject HTML/JavaScript via the notes.php file, which is accessible without admin restrictions.

Classification

Writeup 80%

Attack Type

Xss

Complexity

Trivial

Reliability

Reliable

Target: WordPress Count per Day plugin v3.2.3

No auth needed

Prerequisites: Access to the notes.php file in the plugin directory

MITRE ATT&CK

T1059.007 - JavaScript

devstral-2 · analyzed Feb 18, 2026 Full analysis →

Details

Status pre_cve

Tracked Since Feb 18, 2026