Lucene search
K

9 matches found

Patchstack
Patchstack
added 2026/01/11 7:35 a.m.3 views

WordPress HurryTimer plugin <= 2.14.2 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by benzdeus in WordPress Plugin HurryTimer versions = 2.14.2...

5.9CVSS5.4AI score0.00042EPSS
Exploits0Affected Software1
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2024-49337

Malicious code in bioql PyPI...

4.3CVSS6.5AI score0.00249EPSS
Exploits0References3
CNNVD
CNNVD
added 2025/06/27 12:0 a.m.1 views

WordPress plugin HurryTimer 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

5.3CVSS6.5AI score0.00229EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/05/23 7:19 a.m.2 views

CVE-2024-8667

The HurryTimer – An Scarcity and Urgency Countdown Timer for WordPress & WooCommerce plugin for WordPress is vulnerable to unauthorized post publication due to a missing capability check on the activateCampaign function in all versions up to, and including, 2.10.0. This makes it possible for...

4.3CVSS6.5AI score0.00249EPSS
Exploits0References1
NVD
NVD
added 2025/02/14 10:15 a.m.10 views

CVE-2024-13735

The HurryTimer – An Scarcity and Urgency Countdown Timer for WordPress & WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 2.11.2 due to insufficient input sanitization and output escaping of a campaign name. This makes it possible...

6.4CVSS0.00204EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2025/02/14 9:21 a.m.5 views

CVE-2024-13735 HurryTimer <= 2.11.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Campaign Name

The HurryTimer – An Scarcity and Urgency Countdown Timer for WordPress & WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 2.11.2 due to insufficient input sanitization and output escaping of a campaign name. This makes it possible...

6.4CVSS5.8AI score0.00204EPSS
Exploits0References4
CNNVD
CNNVD
added 2024/10/24 12:0 a.m.1 views

WordPress plugin HurryTimer 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

4.3CVSS6.5AI score0.00249EPSS
Exploits0References3
Patchstack
Patchstack
added 2024/10/23 9:0 p.m.1 views

WordPress HurryTimer plugin <= 2.10.0 - Missing Authorization to Authenticated (Contributor+) Arbitrary Post Publication vulnerability

Missing Authorization to Authenticated Contributor+ Arbitrary Post Publication vulnerability discovered by Webbernaut in WordPress Plugin HurryTimer versions = 2.10.0...

4.3CVSS7AI score0.00249EPSS
Exploits0References1Affected Software1
CNNVD
CNNVD
added 2024/04/18 12:0 a.m.2 views

WordPress Plugin HurryTimer 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

6.5CVSS5.9AI score0.00178EPSS
Exploits0References2
Rows per page
Query Builder