WordPress Plugin Vulnerabilities

Finale WooCommerce Sale Countdown <= 2.9.0 - Arbitrary File Upload

Description

The Finale Lite – Sales Countdown Timer & Discount for WooCommerce WordPress plugin was affected by an Arbitrary File Upload security vulnerability.

Affects Plugins

Plugin icon
finale-woocommerce-sales-countdown-timer-discount
Fixed in 2.9.1

References

URL
https://plugins.trac.wordpress.org/changeset?reponame=&new=2098046%40finale-woocommerce-sales-countdown-timer-discount&old=2093758%40finale-woocommerce-sales-countdown-timer-discount

Miscellaneous

Verified
No
WPVDB ID
744302f1-3dad-41a3-abcb-735a62f38a61

Timeline

Publicly Published
2019-05-29 (about 6 years ago)
Added
2019-06-12 (about 6 years ago)
Last Updated
2019-06-13 (about 6 years ago)

Other

Published
Title
Published
2025-04-14
Title
Celestial Aura <= 2.2 - Authenticated (Subscriber+) Arbitrary File Upload
Published
2014-09-17
Title
Slideshow Gallery < 1.4.7 - Arbitrary File Upload
Published
2025-10-14
Title
Demo Import Kit <= 1.1.0 - Authenticated (Admin+) Arbitrary File Upload
Published
2024-07-11
Title
Realtyna Organic IDX plugin < 4.14.14 - Admin+ Arbitrary File Upload
Published
2020-10-21
Title
Helios Solutions Brand Logo Slider <= 2.1 - Authenticated Arbitrary File Upload