Mod Vvisit Counter vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Mod Vvisit Counter products: 1 record(s), with severity, exploitation and fixes.

Mod Vvisit Counter 1

Exploited only (KEV) →

CVE-2025-40636 Critical · 9.3 CWE-89 Oct 3, 2025

SQL injection in the mod_vvisit_counter module

SQL injection vulnerability in Joomla module mod_vvisit_counter v2.0.4j3. This vulnerability allows an attacker to retrieve database content via the ‘cip_vvisitcounter’ cookie at all endpoints where the plugin counts visits.