WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
countdown-builder
Published
2025-04-03
Title
Countdown, Coming Soon, Maintenance – Countdown & Clock < 2.9.0 - Unauthenticated Limited Local File Inclusion
Slug
countdown-builder
Published
2025-04-01
Title
Countdown & Clock < 2.8.9 - Authenticated (Contributor+) Remote Code Execution
Slug
countdown-for-the-events-calendar
Published
2022-04-12
Title
Multiple Plugins from Cool Plugins - Subscriber+ Arbitrary Plugin Installation & Activation
Slug
countdown-for-the-events-calendar
Published
2025-06-05
Title
The Events Calendar Countdown Addon < 1.4.10 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
countdown-for-the-events-calendar
Published
2026-01-06
Title
The Events Calendar Countdown Addon < 1.4.16 - Missing Authorization
Slug
countdown-time
Published
2024-11-08
Title
Countdown Timer block – Display the event's date into a timer. < 1.2.5 - Authenticated (Contributor+) Post Disclosure
Slug
countdown-time
Published
2025-02-23
Title
Countdown Timer < 1.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
countdown-timer-block
Published
2024-10-16
Title
Countdown Timer <= 1.0.5 - Contributor+ Stored XSS
Slug
countdown-timer-for-elementor
Published
2024-11-28
Title
Countdown Timer for Elementor < 1.3.7 - Contributor+ Stored XSS
Slug
countdown-timer-for-elementor
Published
2025-02-05
Title
Countdown Timer for Elementor < 1.3.7 - Contributor+ Stored XSS
Slug
countdown-timer-for-elementor
Published
2025-09-10
Title
Countdown Timer for Elementor <= 1.3.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'countdown_label'
Slug
countdown-with-background
Published
2026-01-08
Title
CountDown With Image or Video Background <= 1.5 - Reflected Cross-Site Scripting
Slug
countdown-wpdevart-extended
Published
2021-09-27
Title
Countdown and CountUp, WooCommerce Sales Timers < 1.5.8 - CSRF to Stored Cross-Site Scripting
Slug
countdown-wpdevart-extended
Published
2023-11-07
Title
Countdown and CountUp, WooCommerce Sales Timer < 1.8.3 - Admin+ Stored XSS
Slug
countdown_with_background
Published
2025-12-14
Title
CountDown With Image or Video Background <= 1.5 - Authenticated (Contributor+) SQL Injection
Slug
countdowner-elementor
Published
2025-12-31
Title
Countdowner for Elementor <= 1.0.4 - Missing Authorization
Slug
counter-box
Published
2022-05-16
Title
Counter Box < 1.2 - Admin+ LFI
Slug
counter-box
Published
2022-07-08
Title
Counter Box < 1.2.1 - Arbitrary Counter Activation/Deactivation via CSRF
Slug
counter-box
Published
2023-05-22
Title
Multiple Plugins from Wow-Company - Reflected XSS
Slug
counter-box
Published
2024-04-11
Title
Counter Box < 1.2.4 - Counter Deletion via CSRF
Slug
counter-box
Published
2025-01-24
Title
Counter Box < 2.0.6 - Cross-Site Request Forgery
Slug
counter-box
Published
2025-02-28
Title
Counter Box: Add Engaging Countdowns, Timers & Counters to Your WordPress Site < 2.0.7 - Authenticated (Administrator+) DOM-Based Stored Cross-Site Scripting
Slug
counter-visitor-for-woocommerce
Published
2025-07-15
Title
Counter live visitors for WooCommerce < 1.3.7 - Unauthenticated Arbitrary File Deletion in wcvisitor_get_block
Slug
counter-yandex-metrica
Published
2023-05-31
Title
Yandex Metrica Counter <= 1.4.3 - Admin+ Stored XSS
Slug
counters-block
Published
2025-02-23
Title
Counters Block < 1.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting