CVE-2022-29420

CVE-2022-29420 affects WordPress plugin Countdown & Clock (countdown-builder) up to version 2.3.2, enabling stored XSS. Root cause described as improper input handling during web page generation. Some sources indicate authenticated/admin-level context may be required for exploitation; others do n...

WordPress plugin Countdown & Clock 跨站脚本漏洞

WordPress is a blogging platform developed using the PHP language. WordPress plugin Countdown & Clock version 2.3.2 and previous versions have a cross-site scripting vulnerability that can be exploited by attackers to cause cross-site scripting attacks...

WordPress plugin Countdown & Clock 跨站脚本漏洞

WordPress is a blogging platform developed using the PHP language. WordPress plugin Countdown & Clock 2.3.2 and previous versions have a cross-site scripting vulnerability, which can be exploited by attackers to perform cross-site scripting attacks...

WordPress plugin Countdown & Clock 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

WordPress plugin Countdown & Clock 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. A cross-site scripting vulnerability exists in the...

PT-2022-19596 · WordPress · Countdown & Clock

Name of the Vulnerable Software and Affected Versions: Countdown & Clock plugin versions prior to 2.3.3 Description: A Pro Features Lock Bypass issue affects the Countdown & Clock plugin at WordPress. The issue allows bypassing of pro features locks. Recommendations: For versions prior to 2.3.3,...

CVE-2022-29423

Pro Features Lock Bypass vulnerability in Countdown & Clock plugin = 2.3.2 at WordPress...

CVE-2022-29422

Multiple Authenticated admin+ Persistent Cross-Site Scripting XSS vulnerabilities in Adam Skaat's Countdown & Clock plugin = 2.3.2 at WordPress via &ycd-countdown-width;, &ycd-progress-height;, &ycd-progress-width;, &ycd-button-margin-top;, &ycd-button-margin-right;, &ycd-button-margin-bottom;,...

CVE-2022-29421

Reflected Cross-Site Scripting XSS vulnerability in Adam Skaat's Countdown & Clock plugin on WordPress via &ycdtype vulnerable parameter...

CVE-2022-29420

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Adam Skaat Countdown & Clock WordPress plugin countdown-builder allows Stored XSS.This issue affects Countdown & Clock WordPress plugin: from n/a through 2.3.2...

WordPress Countdown & Clock plugin <= 2.4.7 - Multiple Authenticated Persistent Cross-Site Scripting (XSS) vulnerabilities

Multiple Authenticated Persistent Cross-Site Scripting XSS vulnerabilities discovered by Ex.Mi in WordPress Countdown & Clock plugin versions = 2.4.7. Solution No patched version is available...

WordPress Countdown & Clock plugin <= 2.4.7 - Pro Features Lock Bypass vulnerability

Pro Features Lock Bypass vulnerability discovered by Ex.Mi Patchstack in WordPress Countdown & Clock plugin versions = 2.4.7. Solution No patched version is available...

WordPress Countdown & Clock plugin <= 2.3.2 - Reflected Cross-Site Scripting (XSS) vulnerability

Reflected Cross-Site Scripting XSS vulnerability discovered by Ex.Mi Patchstack in WordPress Countdown & Clock plugin versions = 2.3.2. Solution Update the WordPress Countdown & Clock plugin to the latest available version at least 2.3.3...

WordPress Countdown & Clock plugin <= 2.4.7 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Authenticated Stored Cross-Site Scripting XSS vulnerability discovered by Jeong Wonjun aka Pongchi Patchstack Alliance in WordPress Countdown & Clock plugin versions = 2.4.7. Solution No patched version is available...

WordPress The Events Calendar Countdown Addon plugin <= 1.3.1 - Arbitrary Plugin Installation vulnerability

Arbitrary Plugin Installation vulnerability discovered by Jerome Bruandet NinTechNet in WordPress The Events Calendar Countdown Addon plugin versions = 1.3.1. Solution Update the WordPress The Events Calendar Countdown Addon plugin to the latest available version at least 1.4...

WordPress The Events Calendar Countdown Addon plugin <= 1.3.1 - Arbitrary Plugin Activation vulnerability

Arbitrary Plugin Activation vulnerability discovered by Jerome Bruandet NinTechNet in WordPress The Events Calendar Countdown Addon plugin versions = 1.3.1. Solution Update the WordPress The Events Calendar Countdown Addon plugin to the latest available version at least 1.4...

CVE-2021-25064

The Wow Countdowns WordPress plugin through 3.1.2 does not sanitize user input into the 'did' parameter and uses it in a SQL statement, leading to an authenticated SQL Injection...

CVE-2022-0601

The Countdown, Coming Soon, Maintenance WordPress plugin before 2.2.9 does not sanitize and escape the post parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting...

CVE-2022-0601

The Countdown, Coming Soon, Maintenance WordPress plugin before 2.2.9 does not sanitize and escape the post parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting...

WordPress plugin 跨站脚本漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an open source application plugin for WordPress. A cross-site scripting vulnerability exists in Countdown,...