CVE-2026-104667
Animated Number Counters < 3.1 - Editor+ Second-Order SQLi via Counter Order
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
The Animated Number Counters WordPress plugin before 3.1 does not sanitise or escape a value stored by an Editor-level user before concatenating it into a SQL query that runs when any unauthenticated visitor renders a page containing the counter, leading to second-order SQL injection that can read arbitrary data including password hashes.
| Vendor | unknown |
| Product | animated number counters |
| Published | Oct 7, 2026 |
Stay Ahead of the Next One
Get instant alerts for unknown animated number counters
Be the first to know when new unknown vulnerabilities affecting unknown animated number counters are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Unknown / Animated Number Counters
0 < 3.1
References
Credits
Seongwon Lee WPScan