Lucene search
Xu-Liang LiaoPATCHSTACK:0E4FEF6C3ED9C3DFB5F33B69A4ACA386HistorySep 27, 2021 - 12:00 a.m.
WordPress Countdown and CountUp, WooCommerce Sales Timer plugin <= 1.5.7 - Cross-Site Request Forgery (CSRF) leading to Stored Cross-Site Scripting (XSS)
2021-09-2700:00:00
Xu-Liang Liao
patchstack.com
6
0.001 Low
EPSS
Percentile
41.2%
Cross-Site Request Forgery (CSRF) vulnerability leading to Stored Cross-Site Scripting (XSS) discovered by Xu-Liang Liao in WordPress Countdown and CountUp, WooCommerce Sales Timer plugin (versions <= 1.5.7).
Solution
Update the WordPress Countdown and CountUp, WooCommerce Sales Timer plugin to the latest available version (at least 1.5.8).
| CPE | Name | Operator | Version |
|---|---|---|---|
| countdown and countup, woocommerce sales timer | le | 1.5.7 |
Related
wpvulndb
wpvulndb
nvd
nvd
CVE-2021-34636
2021-09-28 14:15:07
prion
prion
Cross site request forgery (csrf)
2021-09-28 14:15:00
cvelist
cvelist
cve
cve
CVE-2021-34636
2021-09-28 14:15:07