Extension WordPress
Vulnérabilités Countdown, Coming Soon, Maintenance – Countdown & Clock
Cette page rassemble les failles publiées pour Countdown, Coming Soon, Maintenance – Countdown & Clock, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Countdown, Coming Soon, Maintenance – Countdown & Clock
10 fiches
Countdown, Coming Soon, Maintenance – Countdown & Clock <= 2.8.9.1 – Unauthenticated Limited Local File Inclusion
The Countdown, Coming Soon, Maintenance – Countdown & Clock plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.8.9.1 via the createCdObj function. This makes it possible for unauthenticated attackers to…
*-2.8.9.1
2.9.0
03/04/2025
Countdown & Clock <= 2.8.8 – Authenticated (Contributor+) Remote Code Execution
The Countdown, Coming Soon, Maintenance – Countdown & Clock plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 2.8.8. This makes it possible for authenticated attackers, with Contributor-level access and above,…
*-2.8.8
2.8.9
01/04/2025
Countdown, Coming Soon, Maintenance – Countdown & Clock <= 2.9.3 – Authenticated (Admin+) Stored Cross-Site Scripting
The Countdown, Coming Soon, Maintenance – Countdown & Clock plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 2.9.3 due to insufficient input sanitization and output escaping. This…
*-2.9.3
Non indiqué
28/10/2024
Countdown, Coming Soon, Maintenance – Countdown & Clock <= 2.7.8 – Missing Authorization to Authenticated (Subscriber+) PHP Object Injection
The Countdown, Coming Soon, Maintenance – Countdown & Clock plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the conditionsRow and switchCountdown functions in all versions up to, and including, 2.7.8. This…
*-2.7.8
2.7.8.1
05/06/2024
Countdown, Coming Soon, Maintenance – Countdown & Clock <= 2.3.9.5 – Authenticated Cross-Site Scripting
The plugin Countdown, Coming Soon, Maintenance – Countdown & Clock for WordPress is vulnerable to Stored Cross-Site Scripting. This makes it possible for authenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user…
*-2.3.9.5
2.3.9.6
25/05/2022
Countdown & Clock <= 2.3.2 – Pro Features Lock Bypass
Pro Features Lock Bypass vulnerability in Countdown & Clock plugin
*-2.3.2
2.3.3
28/04/2022
Countdown, Coming Soon, Maintenance – Countdown & Clock <= 2.3.2 – Cross-Site Scripting
Multiple Authenticated (admin+) Persistent Cross-Site Scripting (XSS) vulnerabilities in Adam Skaat's Countdown & Clock plugin
*-2.3.2
2.3.3
28/04/2022
Countdown & Clock <= 2.3.2 – Reflected Cross-Site Scripting
Reflected Cross-Site Scripting (XSS) vulnerability in Adam Skaat's Countdown & Clock plugin on WordPress via &ycd_type vulnerable parameter.
*-2.3.2
2.3.3
28/04/2022
Countdown & Clock <= 2.3.2 – Authenticated (Admin+) Stored Cross-Site Scripting
Authenticated (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Adam Skaat's Countdown & Clock plugin
*-2.3.2
2.3.3
28/04/2022
Countdown & Clock <= 2.2.8 – Reflected Cross-Site Scripting
The Countdown, Coming Soon, Maintenance WordPress plugin before 2.2.9 does not sanitize and escape the post parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting.
[*, 2.2.9)
2.2.9
21/02/2022
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.