WordPress Plugin Vulnerabilities

Countdown and CountUp, WooCommerce Sales Timers < 1.5.8 - CSRF to Stored Cross-Site Scripting

Description

The plugin is vulnerable to Cross-Site Request Forgery via the save_theme function found in the ~/includes/admin/coundown_theme_page.php file due to a missing nonce check which allows attackers to inject arbitrary web scripts

Affects Plugins

Plugin icon
countdown-wpdevart-extended
Fixed in 1.5.8

References

CVE
CVE-2021-34636
URL
https://www.wordfence.com/vulnerability-advisories/#CVE-2021-34636

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79
CVSS
8.8 (high)

Miscellaneous

Original Researcher
Xu-Liang Liao
Verified
No
WPVDB ID
b8ce9a1f-be79-47aa-bd42-a41ee60d5098

Timeline

Publicly Published
2021-09-27 (about 4 years ago)
Added
2021-09-27 (about 4 years ago)
Last Updated
2022-04-14 (about 4 years ago)

Other

Published
Title
Published
2025-12-04
Title
Easy Jump Links Menus <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
Published
2024-06-12
Title
Elespare – Blog, Magazine and Newspaper Addons for Elementor with Templates, Widgets, Kits, and Header/Footer Builder. One Click Import: No Coding Required! < 3.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Horizontal Nav Menu Widge
Published
2024-10-24
Title
EmbedPress < 4.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published
2015-06-05
Title
Ninja Forms <= 2.9.18 - Cross-Site Scripting (XSS)
Published
2015-07-27
Title
Clean Login < 1.5.1 - Reflected XSS