CVE-2026-104667

Name of the Vulnerable Software and Affected Versions Animated Number Counters WordPress plugin versions prior to 3.1

Description An issue exists where a value stored by a user with Editor-level privileges is not properly sanitized or escaped before being concatenated into a SQL query. This query executes when an unauthenticated visitor renders a page containing the counter, resulting in a second-order SQL injection. This allows an attacker to read arbitrary data from the database, including password hashes.

Recommendations Update the Animated Number Counters WordPress plugin to version 3.1 or later.