CVE-2012-0895

Cross-site scripting (XSS) vulnerability in map/map.php in the Count Per Day module before 3.1.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the map parameter.

• CWE-79

• http://osvdb.org/78271Exploit
• http://packetstormsecurity.org/files/108631/countperday-downloadxss.txtExploit
• http://plugins.trac.wordpress.org/changeset/488883/count-per-day
• http://secunia.com/advisories/47529Vendor Advisory
• http://wordpress.org/extend/plugins/count-per-day/changelog/
• http://www.exploit-db.com/exploits/18355Exploit
• http://www.securityfocus.com/bid/51402Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/72384
• http://osvdb.org/78271Exploit
• http://packetstormsecurity.org/files/108631/countperday-downloadxss.txtExploit
• http://plugins.trac.wordpress.org/changeset/488883/count-per-day
• http://secunia.com/advisories/47529Vendor Advisory
• http://wordpress.org/extend/plugins/count-per-day/changelog/
• http://www.exploit-db.com/exploits/18355Exploit
• http://www.securityfocus.com/bid/51402Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/72384

Published

Jan 20, 2012

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2012-0881Apache Xerces2 Java Parser before 2.12.0 allows remote attac…
• CVE-2012-0882Buffer overflow in yaSSL, as used in MySQL 5.5.20 and possib…
• CVE-2012-0883envvars (aka envvars-std) in the Apache HTTP Server before 2…
• CVE-2012-0884The implementation of Cryptographic Message Syntax (CMS) and…
• CVE-2012-0885chan_sip.c in Asterisk Open Source 1.8.x before 1.8.8.2 and …
• CVE-2012-0891Multiple cross-site scripting (XSS) vulnerabilities in Puppe…
• CVE-2012-0896Absolute path traversal vulnerability in download.php in the…
• CVE-2012-0897Stack-based buffer overflow in the JPEG2000 plugin in IrfanV…
• CVE-2012-0898Directory traversal vulnerability in meb_download.php in the…
• CVE-2012-0899Cross-site scripting (XSS) vulnerability in referencement/si…
• CVE-2012-0900Multiple cross-site scripting (XSS) vulnerabilities in Beehi…
• CVE-2012-0901Cross-site scripting (XSS) vulnerability in yousaytoo.php in…