Plugin icon

Counter Box – Add Countdowns, Timers & Dynamic Counters to WordPress

counter-box

Vulnerabilities:

7

Last Updated:

August 25, 2026

Active Installs:

1000

Published
Title
Fixed in
CVSS
Published
2026-06-16
Title
Counter Box < 2.0.14 - Authenticated (Administrator+) PHP Object Injection via Import
Fixed in
Fixed in 2.0.14
CVSS
6.6 (medium)
Published
2025-02-28
Title
Counter Box: Add Engaging Countdowns, Timers & Counters to Your WordPress Site < 2.0.7 - Authenticated (Administrator+) DOM-Based Stored Cross-Site Scripting
Fixed in
Fixed in 2.0.7
CVSS
4.4 (medium)
Published
2025-01-24
Title
Counter Box < 2.0.6 - Cross-Site Request Forgery
Fixed in
Fixed in 2.0.6
CVSS
4.3 (medium)
Published
2024-04-11
Title
Counter Box < 1.2.4 - Counter Deletion via CSRF
Fixed in
Fixed in 1.2.4
CVSS
4.3 (medium)
Published
2023-05-22
Title
Multiple Plugins from Wow-Company - Reflected XSS
Fixed in
Fixed in 1.2.2
CVSS
5.8 (medium)
Published
2022-07-08
Title
Counter Box < 1.2.1 - Arbitrary Counter Activation/Deactivation via CSRF
Fixed in
Fixed in 1.2.1
CVSS
4.3 (medium)
Published
2022-05-16
Title
Counter Box < 1.2 - Admin+ LFI
Fixed in
Fixed in 1.2
CVSS
6.8 (medium)