CVE-2014-2315: Multiple cross-site scripting (XSS) vulnerabilities in the Thank You Counter Button plugin 1.8.7 for WordPr...

Security readout for executives and security teams

This CVE affects the Thank You Counter Button WordPress plugin 1.8.7. Attackers may inject malicious script or HTML through plugin-related settings parameters. For a business, the concern is compromised WordPress page behavior, administrator session exposure, or reputational harm if the plugin remains installed. Exposure is limited to WordPress installations running the Thank You Counter Button plugin version 1.8.7. Sites without this plugin, or running versions not identified by the cited CVE, are not confirmed affected by the provided sources. Handle as a targeted legacy WordPress plugin risk. It is not confirmed actively exploited, but XSS in a public CMS can create brand, session, and site-integrity risk if the vulnerable plugin remains deployed. Mitigation focus: Inventory WordPress sites for Thank You Counter Button plugin version 1.8.7.; Check vendor or WordPress plugin guidance for a fixed version or replacement.; Disable or remove the plugin if it is unnecessary or unsupported..

Prepared

Jun 14, 2026, 14:32 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.