Extension WordPress

Vulnérabilités Countdown Timer Block – Animated Countdown for Events or Launches

Cette page rassemble les failles publiées pour Countdown Timer Block – Animated Countdown for Events or Launches, leurs plages de versions affectées et les correctifs signalés dans la base locale.

2Vulnérabilités
0Critiques
2Avec correctif
6,4CVSS maximal

Historique de sécurité

CVE et vulnérabilités de Countdown Timer Block – Animated Countdown for Events or Launches

2 fiches

CVE-2025-26938 Moyenne · 6,4
Countdown Timer Block – Animated Countdown for Events or Launches

Countdown Timer <= 1.2.6 – Authenticated (Contributor+) Stored Cross-Site Scripting

The Countdown Timer plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 1.2.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and…

Versions affectées

*-1.2.6

Correctif

1.2.7

Publication

23/02/2025

CVE-2024-10669 Moyenne · 4,3
Countdown Timer Block – Animated Countdown for Events or Launches

Countdown Timer block – Display the event's date into a timer. <= 1.2.4 – Authenticated (Contributor+) Post Disclosure

The Countdown Timer block – Display the event's date into a timer. plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.2.4 via the [ctb] shortcode due to insufficient restrictions on which…

Versions affectées

*-1.2.4

Correctif

1.2.5

Publication

08/11/2024

WP Commander

Rechercher dans toute la base WordPress

Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.

Ouvrir le tableau des vulnérabilités